CVE-2026-75935 | BDVDB-2026-362129 Detail
Amazon IonAmazon Ion Java
Description#
Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users should upgrade to version 1.12.0.
Impact#
CAPEC-130 Excessive Allocation
Weaknesses#
- CWE-789 Memory allocation with excessive size value
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.