CVE-2026-84851
Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6
An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.
CVSS 4.0 · 8.7 High
EPSS < 1%
KEV · Not listed
Vendors
Products