PT-2026-84881 · Amazon · Ion-C
CVE-2026-84851
·
Published
2026-09-02
·
Updated
2026-09-03
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Amazon Ion-C versions prior to 1.1.6
Description
An uncontrolled recursion issue allows a remote unauthenticated actor to craft Ion data that exhausts the native call stack. This leads to an application crash and a subsequent denial of service.
Recommendations
Update Amazon Ion-C to version 1.1.6 or later.
Exploit
Fix
DoS
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ion-C