VULNERABILITY INTELLIGENCE
CVE-2026-84851
CVSS score7.5 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-03
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.
Weakness classification
- ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-674