Medium severity6.2OSV Advisory· Published Nov 7, 2025· Updated Apr 15, 2026
CVE-2025-12829
CVE-2025-12829
Description
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Affected products
1- Range: v1.0.0, v1.0.1, v1.0.2, …
Patches
149c53b55e124Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
3News mentions
0No linked articles in our index yet.