{"id":"CVE-2026-81533","title":"An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause","summary":"An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where th…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-121"],"vendor":"mongodb","product":"bi_connector_odbc_driver","affected":["bi_connector_odbc_driver < 1.4.10"],"patched":["bi_connector_odbc_driver 1.4.10"],"published":"2026-08-28","updated":"2026-09-11","sourceUpdated":"2026-09-11T18:53:28.090","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81533","references":[{"url":"https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases","label":"cna@mongodb.com"}],"tags":["nvd"],"epss":0.00366,"epssPercentile":0.27711,"ingestedAt":"2026-09-11T19:57:09.303Z","slug":"CVE-2026-81533","body":"## Overview\n\nAn application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the hosting application process to terminate unexpectedly or corrupt adjacent memory in that process.\n\n## Affected\n\n- `bi_connector_odbc_driver < 1.4.10`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `bi_connector_odbc_driver 1.4.10`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}