CVE-2026-35559CWE-787

CVE-2026-35559

Medium · published April 4, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations.

To remediate this issue, users should upgrade to version 2.1.0.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00508 · 42.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-04-04T01:17Z
Affected products (1)
ProductVersionsFixed in
amazon/athena_odbc< 2.1.0.02.1.0.0
References (6)
https://aws.amazon.com/security/security-bulletins/2026-013-aws/ · ff89ba41-3aa1-4d27-914a-91399e9639e5https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg · ff89ba41-3aa1-4d27-914a-91399e9639e5https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi · ff89ba41-3aa1-4d27-914a-91399e9639e5
EPSS history
Timeline
  • 03 APR 20:13Z
    Out-of-bounds write in query processing components in Amazon Athena ODBC driver
    cvelistv5