Vulnerabilities

TI-2026-53161 CVE-2026-75936

Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java

MEDIUM 45

Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expand…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2026-08-18 Fixed in 1.12.0 CWE-409

TI-2026-53160 CVE-2026-75935

Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

MEDIUM 45

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00609 Published 2026-08-18 Partial fix · 1.12.0 CWE-789

Vulnerabilities

Filters

Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java

Memory-amplification denial of service via declared-length preallocation in Amazon ion-java