Beveiligingsadvies

CVE-2025-12829

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-07 18:04:15
Laatst bijgewerkt 2025-11-07 18:13:55
Toegewezen door AMZN
CVSS-score 6.9
Status PUBLISHED

Beschrijving

An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.