Skip to content
OpenAdvisories

Product · Amazon Ion

Amazon Ion Java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-75936

    Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java

    Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon dec…

    Amazon Ion Amazon Ion Java
  • High 7.5
    CVE-2026-75935

    Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

    Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocatio…

    Amazon Ion Amazon Ion Java