PT-2026-30221 · Amazon · Amazon Athena Odbc Driver

Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-35562

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations.

To remediate this issue, users should upgrade to version 2.1.0.0.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-35562

Affected Products

Amazon Athena Odbc Driver

References · 7

• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi · Patch
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg · Patch
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-35562 · Security Note
• https://aws.amazon.com/security/security-bulletins/2026-013-aws · Vendor Advisory
• https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg · Patch
• https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html · Note