CVE-2026-19642
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
An out-of-bounds write vulnerability in the Base64 decoder in aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application processing crafted Base64 input.
Risk Assessment
An attacker could cause application crashes or memory corruption, potentially leading to data integrity issues or denial of service.
Recommendation
Upgrade aws-sdk-cpp to version 1.11.862 or later.
Original NVD description (English source)
An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.