云虫漏洞库

CVE-2026-81533 - An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the ho - 漏洞详情

漏洞编号:CVE-2026-81533

风险等级:高危

漏洞来源:CVE

CVE 编号:CVE-2026-81533

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:CWE-121

发布/更新时间:2026-08-28 / 2026-08-28

漏洞描述

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the hosting application process to terminate unexpectedly or corrupt adjacent memory in that process.

相关链接

相关漏洞

« 返回首页