Skip to content
Sign in
6.9 Medium

CVE-2025-12829 An uninitialized stack read issue exists in Amazon Ion-C…

Description

An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.

Affected products and versions

Product Affected versions Fixed in
Ion-C 1.1 earliest → < 1.1.4 1.1.4

Other CVEs of Ion-C

The 2 CVEs of Ion-C →
CVE-2026-84851 An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated… 7.5 High
Track this CVE