{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amongodbatlas_sql_odbc_driver/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mongodb:atlas_sql_odbc_driver:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-120952"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Atlas SQL ODBC Driver"],"_cs_severities":["high"],"_cs_tags":["vulnerability","memory-corruption","odbc"],"_cs_type":"advisory","_cs_vendors":["MongoDB"],"content_html":"\u003cp\u003eThe MongoDB Atlas SQL ODBC Driver contains an out-of-bounds write vulnerability (CVE-2026-120952). The flaw occurs when the driver retrieves database values into fixed-width client-side targets. The driver fails to validate the length of the textual representation of the data against the buffer size before copying, which leads to memory corruption. An attacker with basic database write privileges can influence the data written beyond the buffer boundaries.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation can lead to unexpected application termination (Denial of Service) or potential memory corruption within the client application utilizing the driver.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory systems and applications utilizing the MongoDB Atlas SQL ODBC Driver.\u003c/li\u003e\n\u003cli\u003eMonitor for application crashes or memory access violations involving the MongoDB ODBC Driver components on client-side hosts.\u003c/li\u003e\n\u003cli\u003eContact the vendor for available security patches or updates addressing CVE-2026-120952.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-04T00:25:52Z","date_published":"2026-11-04T00:25:52Z","id":"https://feed.craftedsignal.io/briefs/2026-11-mongodb-atlas-odbc-oob-write/","summary":"An out-of-bounds write vulnerability in the MongoDB Atlas SQL ODBC Driver allows a user with basic write privileges to trigger memory corruption and application crashes by manipulating database values retrieved into fixed-width buffers.","title":"MongoDB Atlas SQL ODBC Driver: Out-of-bounds write (CVE-2026-120952)","url":"https://feed.craftedsignal.io/briefs/2026-11-mongodb-atlas-odbc-oob-write/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:mongodb:atlas_sql_odbc_driver:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}