Vulnerability · Published Apr 3, 2026 · Assigned by AMZN
CVE-2026-35562Allocation of resources without limits in parsing components in Amazon Athena ODBC driver
High 7.5
In plain English
A high-severity resource allocation without limits in Amazon Athena ODBC driver from Amazon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering crafted input that triggers excessive resource consumption during the driver's parsing operations. To remediate this issue, users should upgrade to version 2.1.0.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Amazon | Amazon Athena ODBC driver | 0 – before 2.1.0.0 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi patch
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm patch
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg patch
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg patch
- https://aws.amazon.com/security/security-bulletins/2026-013-aws/ vendor-advisory
- https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html release-notes