CVE-2026-120952 MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write

An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a fixed-width client-side target. The driver produces a textual form of the value that is longer than the fixed target the ODBC interface defines, and copies i...

CVE-2026-120952

The MongoDB Atlas SQL ODBC Driver contains an out-of-bounds write vulnerability. This occurs when the driver retrieves a specific database type value into a fixed-width client-side target (such as a 16-byte SQL_C_GUID). The driver generates a textual representation longer than the target's define...