The vulnerability is an out‑of‑bounds write in the query processing components of the Amazon Athena ODBC driver before version 2.1.0.0. When the driver receives specially crafted data as part of a query, it may overwrite memory and crash, which results in the driver terminating and disrupting any application that relies on it. The flaw is a buffer overflow (CWE‑787) and does not provide an attacker with code execution or data disclosure.

The affected product is the Amazon Athena ODBC driver on Windows, macOS, and Linux. Versions earlier than 2.1.0.0 on these operating systems are susceptible, regardless of whether the driver is installed locally or used in a corporate data‑analysis workflow.

The CVSS base score of 7.1 indicates moderate severity. The EPSS score is below 1%, suggesting a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a malicious query sent through an ODBC connection that triggers the out‑of‑bounds write, so the threat actor needs to have the ability to submit queries to the driver.