Description
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Amazon | Ion-C | — | 1.1.4 |