Atlas Sql
Monthly
Out-of-bounds writes in the MongoDB Atlas SQL ODBC Driver can place query result values outside the buffer the calling application supplied, corrupting client-side memory or terminating the client process. Exposure requires two conditions to hold at once: a party must be able to influence the values a query returns, and the client application must use a specific application-chosen pattern of requesting several result rows at once (bulk/array row retrieval), so applications that fetch rows one at a time are not affected. Impact is limited to the client application's memory - no confidentiality loss, only limited integrity modification or process termination - and no public exploit has been identified at time of analysis; the CDC (vuln.today) decision label is monitor and the assessed severity is low despite the network-reachable vector.
Out-of-bounds writes in the MongoDB Atlas SQL ODBC Driver can place query result values outside the buffer the calling application supplied, corrupting client-side memory or terminating the client process. Exposure requires two conditions to hold at once: a party must be able to influence the values a query returns, and the client application must use a specific application-chosen pattern of requesting several result rows at once (bulk/array row retrieval), so applications that fetch rows one at a time are not affected. Impact is limited to the client application's memory - no confidentiality loss, only limited integrity modification or process termination - and no public exploit has been identified at time of analysis; the CDC (vuln.today) decision label is monitor and the assessed severity is low despite the network-reachable vector.