VULNERABILITY INTELLIGENCE
CVE-2025-12829
CVSS score6.9 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-11-07
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Description
An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.
Weakness classification
- CWE-125: Out-of-bounds Read