CyberRota Analysis
AI-GeneratedThe MongoDB BI Connector ODBC Driver is vulnerable due to a missing bounds check when parsing stored procedure parameter metadata, which can lead to an out-of-bounds write and potential memory corruption in the client application. This vulnerability requires an attacker to control the server or respond with malformed metadata, potentially causing application crashes or the execution of arbitrary code. Organizations using MongoDB BI Connector should prioritize this issue to mitigate the risk of exploitation and protect their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its place, in order to return malformed metadata. The resulting memory corruption may cause the client application to terminate abnormally or, under certain conditions, execute unintended code.