CVE-2026-120959

The MongoDB Atlas SQL ODBC Driver contains a memory-handling flaw where the driver uses the ignored SQLBindCol BufferLength as a fixed-width row-array stride. This leads to out-of-bounds writes when a query returns multiple result rows, potentially allowing an attacker who can influence query ret...

CVE-2026-120064

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQLDESCCOUNT on an application row descriptor...

EUVD-2026-115377

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQLDESCCOUNT on an application row descriptor...

CVE-2026-120064

The psqlODBC driver (versions before 18.00.0006 ) is vulnerable to out-of-bounds reads and writes because several entry points fail to validate application-supplied column numbers or row indexes used as array indexes. Specifically, SQLBindCol can wrap the binding count to a negative value if the ...

CVE-2026-120064 psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQLDESCCOUNT on an application row descriptor...

CVE-2026-120064 psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQLDESCCOUNT on an application row descriptor...

CVE-2026-120064: PostgreSQL psqlODBC: Several psqlODBC entry points use an application-supplied column number or row index as an array index without…

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQLDESCCOUNT on an application row descriptor...

PT-2026-135654

Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number above 32767 wraps the binding count negative and a later copy runs off the array. A negative SQL DESC COUNT on an application row descripto...