CVE-2025-12829 | BDVDB-2026-301089 Detail
AmazonIon-C
Description#
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Impact#
CAPEC-540: Overread Buffers
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.