Atlas Sql Odbc Driver
Monthly
Out-of-bounds write in the MongoDB Atlas SQL ODBC Driver affects applications that fetch a value of a particular database type into a fixed-width client-side target: the driver renders the value into a textual form longer than the target the ODBC interface defines and copies it without limiting the copy to the buffer's real size. Exploitation requires an authenticated database user with basic write privileges who can store such a value, plus a consuming application that retrieves it into a fixed-width bound target, so the realistic outcome is memory corruption that terminates the client application rather than code execution or data disclosure (CVSS 4.0 base 6.0; independently assessed as CVSS 3.1 AV:N/AC:H/PR:L/UI:N/C:N/I:L/A:H). No public exploit was identified at time of analysis, the issue is not in CISA KEV, and the priority decision is this_month - a moderate-severity, moderate-priority issue rather than a top-tier emergency.
MongoDB Atlas SQL ODBC Driver and Schema Builder CLI fail to validate URI schemes in authorization and token endpoints returned by an OIDC issuer's discovery document, allowing an attacker-controlled MongoDB deployment to dispatch arbitrary URIs to a victim's operating system protocol handler. Users employing MONGODB-OIDC authentication who are induced to connect to a rogue or compromised MongoDB deployment may have OIDC credentials exposed or, under conditions where a dangerous OS protocol handler is registered, experience code execution within their user session context. No public exploit has been identified at time of analysis, and exploitation carries meaningful social engineering prerequisites that constrain real-world reach despite the network-accessible attack vector.
Out-of-bounds write in the MongoDB Atlas SQL ODBC Driver affects applications that fetch a value of a particular database type into a fixed-width client-side target: the driver renders the value into a textual form longer than the target the ODBC interface defines and copies it without limiting the copy to the buffer's real size. Exploitation requires an authenticated database user with basic write privileges who can store such a value, plus a consuming application that retrieves it into a fixed-width bound target, so the realistic outcome is memory corruption that terminates the client application rather than code execution or data disclosure (CVSS 4.0 base 6.0; independently assessed as CVSS 3.1 AV:N/AC:H/PR:L/UI:N/C:N/I:L/A:H). No public exploit was identified at time of analysis, the issue is not in CISA KEV, and the priority decision is this_month - a moderate-severity, moderate-priority issue rather than a top-tier emergency.
MongoDB Atlas SQL ODBC Driver and Schema Builder CLI fail to validate URI schemes in authorization and token endpoints returned by an OIDC issuer's discovery document, allowing an attacker-controlled MongoDB deployment to dispatch arbitrary URIs to a victim's operating system protocol handler. Users employing MONGODB-OIDC authentication who are induced to connect to a rogue or compromised MongoDB deployment may have OIDC credentials exposed or, under conditions where a dangerous OS protocol handler is registered, experience code execution within their user session context. No public exploit has been identified at time of analysis, and exploitation carries meaningful social engineering prerequisites that constrain real-world reach despite the network-accessible attack vector.