CyberRota Analysis
AI-GeneratedThe MongoDB BI Connector ODBC Driver is vulnerable due to improper handling of floating point values, which can lead to buffer overflow and memory corruption when large values are converted to text. This flaw could allow an attacker to crash applications that read data through the BI Connector, potentially disrupting services. Organizations using MongoDB with the BI Connector should prioritize patching this vulnerability to mitigate risks of application instability and service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt adjacent memory. A user who can store data in a collection read through the BI Connector could use this to crash the application performing the read.