The MongoDB BI Connector ODBC Driver contains an integer overflow or wraparound flaw (CWE-190) triggered by excessively long catalog, schema, or object names supplied to metadata retrieval functions. This results in out-of-bounds writes to a fixed-size buffer, causing memory corruption within the calling application's process. The vulnerability can cause application crashes and, in some cases, enable arbitrary code execution. The issue affects version 1.0.0 and all versions from 1.0.0 up to but not including 1.4.9. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported as of the publication date.

Successful exploitation can lead to memory corruption in the calling application, causing abnormal termination (crashes) and potentially allowing an attacker to execute arbitrary code within the context of the affected process. This poses a critical security risk, especially in environments where the BI Connector ODBC Driver is used to interface with MongoDB databases.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid supplying unusually long catalog, schema, or object names to metadata retrieval functions in the MongoDB BI Connector ODBC Driver. Monitor vendor communications for updates on patches or official mitigations.