Aws Software Development Kit (Amazon) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 5286 known versions, newest CVE from 2026-08-12. Vendor: Amazon.

CVEs of Aws Software Development Kit

• CVE-2026-19643 - CVSS 6 (medium), 2026-08-12: An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash…
• CVE-2026-19642 - CVSS 6 (medium), 2026-08-12: An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap…
• CVE-2023-51651 - CVSS 6 (medium), 2023-12-22: AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix…
• CVE-2022-2582 - CVSS 4.3 (medium), 2022-12-27: The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the…
• CVE-2022-4725 - CVSS 9.8 (critical), 2022-12-27: A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file…
• CVE-2018-19981 - CVSS 7.2 (high), 2019-04-04: Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service.…