PT-2026-86241 · Amazon · Ion-Java
CVE-2026-85786
·
Published
2026-09-04
·
Updated
2026-09-04
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Amazon ion-java versions prior to 1.12.1
Description
Improper handling of highly compressed data may allow remote attackers to cause a denial of service. This occurs when a crafted compressed Ion document expands to an arbitrarily large size during decompression, resulting from insufficient coverage of the GZIP auto-decompression opt-out.
Recommendations
Upgrade to version 1.12.1.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ion-Java