CVE-2026-120952

The record

An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a fixed-width client-side target. The driver produces a textual form of the value that is longer than the fixed target the ODBC interface defines, and copies it without limiting the copy to the target's real size. A database user with basic write privileges can influence part of the data written outside the target, which may corrupt memory in the application using the driver and cause that application to terminate unexpectedly.

Affected packages

Related vulnerabilities

• CVE-2026-120931 Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47… CWE-787
• CVE-2026-61495 TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write… CWE-787
• CVE-2026-121037 Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38… CWE-787
• CVE-2026-120959 A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for… CWE-787
• CVE-2026-63418 Monitoring Plugins is a suite of plugins for monitoring applications. CWE-787
• CVE-2026-40661 An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an… CWE-787
• CVE-2026-121513 Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote… CWE-787
• CVE-2026-121510 Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record… CWE-787