CVE-2026-19642

MediumCVSS 5.9

Published: 12/08/2026(UTC)Updated: 23/10/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

42th percentile - higher than 42% of all known CVEs

Summary

An out-of-bounds write vulnerability in the Base64 decoder in aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application processing crafted Base64 input.

Risk Assessment

An attacker could cause application crashes or memory corruption, potentially leading to data integrity issues or denial of service.

Recommendation

Upgrade aws-sdk-cpp to version 1.11.862 or later.

Other vulnerabilities in aws-sdk-cpp

CVE-2026-19643Medium
An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.

Original NVD description (English source)

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS