CVE-2026-120959
Low · 3.7CVSS
3.7
EPSS
0.2%
Published
Nov 3, 2026
CISA due date
—
The record
A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside the bounds of a buffer provided by the calling application. A party able to influence the values a query returns may cause data to be placed at an unintended location in the client application's memory, which may result in unintended modification of that memory or termination of the client process. Reaching this condition depends on a specific, application-chosen way of requesting several result rows at once.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-120931 Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47… CWE-787
- CVE-2026-61495 TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write… CWE-787
- CVE-2026-121037 Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38… CWE-787
- CVE-2026-120952 An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value… CWE-787
- CVE-2026-63418 Monitoring Plugins is a suite of plugins for monitoring applications. CWE-787
- CVE-2026-40661 An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an… CWE-787
- CVE-2026-121513 Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote… CWE-787
- CVE-2026-121510 Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record… CWE-787