medium6.2
CVE-2025-12829
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a wa…
Impact
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Amazon Ion-C | before 1.1.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.