CVE-2026-18888

Name of the Vulnerable Software and Affected Versions MongoDB BI Connector ODBC Driver (affected versions not specified)

Description The driver converts floating point column values into text without verifying if the result fits within the destination buffer. This can lead to a buffer overflow, where the driver writes beyond the buffer boundary and corrupts adjacent memory when reading sufficiently large floating point values. An attacker capable of storing data in a collection read via the BI Connector can exploit this to crash the application performing the read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.