Ion-c (Amazon) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-02. Vendor: Amazon.

CVEs of Ion-c

• CVE-2026-84851 - CVSS 8.7 (high), 2026-09-02: An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts…
• CVE-2025-12829 - CVSS 6.9 (medium), 2025-11-07: An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a…