6.9
Moyenne
CVE-2025-12829 An uninitialized stack read issue exists in Amazon Ion-C…
Description
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ion-C 1.1 | premières → < 1.1.4 | 1.1.4 |