AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-080

CVE-2026-19642 & CVE-2026-19643

AWS

CVE-2026-19642 · Published Oct 21, 2026

Medium5.9
No fix yet
AWS advisory

CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 4Severity: Unrated to Medium
Details and references
Severity from
NVD
Also known as
CVE-2026-19643

More AWS advisories

All AWS
High 8.1Oct 21Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()CVE-2026-112408no fix yetCritical 9.8Oct 21PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)CVE-2026-109618no fix yetHigh 7.8Oct 21CVE-2026-18656 & CVE-2026-18657CVE-2026-18656no fix yetMedium 5.5Oct 21Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB...CVE-2026-18954no fix yetHigh 8.1Oct 21Missing Authorization in OpenSearch Alerting PluginCVE-2026-19311no fix yetMedium 6.8Oct 21Disabled SSH host key verification in AWS CLI EMR helper commandsCVE-2026-18654no fix yet