PT-2026-30218 · Amazon · Amazon Athena Odbc Driver

Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-35559

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to crash the driver by using specially crafted data that is processed by the driver during query operations.

To remediate this issue, users should upgrade to version 2.1.0.0.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-35559

Affected Products

Amazon Athena Odbc Driver

References · 7

• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi · Patch
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-35559 · Security Note
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg · Patch
• https://aws.amazon.com/security/security-bulletins/2026-013-aws · Vendor Advisory
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg · Patch
• https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html · Note