This vulnerability arises from incorrect buffer capacity calculation in the MongoDB BI Connector ODBC Driver setup dialog's file and folder selection handling. When a user opens the setup dialog for a data source with an excessively long file path, the driver may write beyond the allocated buffer, causing a stack-based buffer overflow (CWE-121). The impact ranges from process crashes to potential execution of arbitrary code in the context of the user running the dialog, depending on build configuration. The issue requires user interaction (opening the setup dialog and initiating file/folder selection) and local access. No official patch or remediation level has been published as of now.

The vulnerability can cause abnormal termination of the MongoDB BI Connector ODBC Driver setup dialog or, under certain conditions, allow execution of unintended code with the privileges of the user running the dialog. This could lead to local privilege escalation or arbitrary code execution if exploited. However, exploitation requires user interaction and local access to the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening the setup dialog for data sources with over-length file path settings or restrict access to the BI Connector ODBC Driver setup dialog to trusted users only.