An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://aws.amazon.com/security/security-bulletins/2026-080-aws/ Vendor Advisory
- https://github.com/aws/aws-sdk-cpp/security/advisories/GHSA-mxm9-xpf9-x66x Vendor Advisory
Vendor advisories in the News 1
- CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++ AWS Security Bulletins · 2026-10-21
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.0 · amazonNVD modified 2026-10-23 19:10
Affected (CPE criteria) 1
cpe:2.3:a:amazon:aws_software_development_kit:*:*:*:*:*:c\+\+:*:*