CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain conditions, execute unintended code.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9	Vendor Advisory Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:mongodb:bi_connector_odbc_driver:*:*:*:*:*:*:*:*

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Una comprobación de límites faltante al analizar metadatos de parámetros de procedimientos almacenados en el controlador ODBC de MongoDB BI Connector puede resultar en una escritura fuera de límites en el proceso de la aplicación cliente. Activar este problema requiere control sobre el servidor al que se conecta el controlador, o la capacidad de responder en su lugar, para devolver metadatos malformados. La corrupción de memoria resultante puede hacer que la aplicación cliente termine de forma anormal o, bajo ciertas condiciones, ejecutar código no deseado.

Information

Published : 2026-08-12 21:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-19002

Mitre link : CVE-2026-19002

CVE.ORG link : CVE-2026-19002

JSON object : View

Products Affected

mongodb

bi_connector_odbc_driver

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2026-19002", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19002", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T12:54:56.843245Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}], "cvssMetricV40": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cna@mongodb.com", "affectedData": [{"repo": "https://github.com/mongodb/mongo-bi-connector-odbc-driver", "vendor": "MongoDB", "product": "BI Connector ODBC Driver", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "1.4.9", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-12T21:17:37.440", "references": [{"url": "https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9", "tags": ["Vendor Advisory", "Release Notes"], "source": "cna@mongodb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@mongodb.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain conditions, execute unintended code."}, {"lang": "es", "value": "Una comprobaci\u00f3n de l\u00edmites faltante al analizar metadatos de par\u00e1metros de procedimientos almacenados en el controlador ODBC de MongoDB BI Connector puede resultar en una escritura fuera de l\u00edmites en el proceso de la aplicaci\u00f3n cliente. Activar este problema requiere control sobre el servidor al que se conecta el controlador, o la capacidad de responder en su lugar, para devolver metadatos malformados. La corrupci\u00f3n de memoria resultante puede hacer que la aplicaci\u00f3n cliente termine de forma anormal o, bajo ciertas condiciones, ejecutar c\u00f3digo no deseado."}], "lastModified": "2026-10-23T19:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mongodb:bi_connector_odbc_driver:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A9AD1E-C6E1-4143-B62E-0E490521AB19", "versionEndExcluding": "1.4.9", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cna@mongodb.com"}