CVE-2026-81532

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI ODBC driver (affected versions not specified)

Description An issue exists where a user submitting SQL through an application can provide a positioned-cursor statement with a cursor name that exceeds the size of an internal fixed-length buffer. Since the driver does not bound the name length before constructing its diagnostic message, memory adjacent to the buffer is overwritten with user-supplied content. This memory corruption can lead to the termination of the hosting application process or potentially allow the execution of unintended code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.