PT-2026-30218 · Amazon · Amazon Athena Odbc Driver+1

CVE-2026-35559 · Published 2026-04-03 · Updated 2026-04-03

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Amazon Athena ODBC driver versions prior to 2.1.0.0

Description An out-of-bounds write exists in the query processing components. This occurs when the driver processes specially crafted data during query operations, which may allow a threat actor to crash the driver. An out-of-bounds write is a condition where the program writes data past the end of the intended buffer, potentially corrupting memory.

Recommendations Upgrade to version 2.1.0.0.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-35559

Affected Products

Amazon Athena Odbc Driver

Athena Odbc

References · 7

• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi · Patch
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg · Patch
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm · Patch
• https://aws.amazon.com/security/security-bulletins/2026-013-aws · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35559 · Security Note
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg · Patch
• https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html · Note