6.5
Medium
CVE-2026-35559 Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a…
Description
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations. To remediate this issue, users should upgrade to version 2.1.0.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Amazon Athena ODBC driver 2.1 | earliest → < 2.1.0.0 | 2.1.0.0 |
Other CVEs of Amazon Athena ODBC driver
The 6 CVEs of Amazon Athena ODBC driver →
CVE-2026-35558
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0…
7.8
High
CVE-2026-5485
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on…
7.8
High
CVE-2026-35562
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow…
7.5
High
CVE-2026-35561
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC…
7.4
High