Advisoriesby IbisAWSAWS-2026-083
Issue with Amazon ion-java - Memory-amplification denial of service
No fix yet
Bulletin ID: 2026-083-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/18/2026 12:30 PM PDT Description: ion-java is a Java library that implements the Amazon Ion data format specification. We identified CVE-2026-75935, memory-amplification denial of service via declared-length preallocation, and CVE-2026-75936, memory-amplification denial of service via highly compressed data expansion. Affected versions: < 1.12.0 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to High
Details and references
- Severity from
- NVD
- Also known as
- CVE-2026-75936
More AWS advisories
All AWS
Stored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsCVE-2026-77811no fix yetIssue with Athena Federated Query Neptune ConnectorCVE-2026-77810no fix yetIssue with FreeRTOS-KernelCVE-2026-77234no fix yetRemote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB PluginCVE-2026-18420no fix yetIssue with Athena Federated Query Clickhouse ConnectorCVE-2026-75910no fix yetUncontrolled resource consumption in OpenSearch Dashboards capabilities routeCVE-2026-75897no fix yet