7.5
High
CVE-2026-84851 An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated…
Description
An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ion-C 1.1 | earliest → < 1.1.6 | 1.1.6 |