AWS Vulnerabilities and Affected Products
Vulnerabilities associated with aws-sdk-cpp.
Products
Clear product- FreeRTOS-Plus-TCP7 vulnerabilities
- tough7 vulnerabilities
- Kiro IDE5 vulnerabilities
- AWS-LC4 vulnerabilities
- Research and Engineering Studio (RES)4 vulnerabilities
- AWS Ops Wheel3 vulnerabilities
- aws-cdk3 vulnerabilities
- Opensearch3 vulnerabilities
- tuftool3 vulnerabilities
- AWS Advanced JDBC Wrapper2 vulnerabilities
- AWS Serverless Application Model Command Line Interface2 vulnerabilities
- AWS-LC-FIPS2 vulnerabilities
- aws-sdk-cpp2 vulnerabilities
- bedrock-agentcore2 vulnerabilities
- Client VPN2 vulnerabilities
- Firecracker2 vulnerabilities
- SageMaker Python SDK2 vulnerabilities
- sagemaker-python-sdk2 vulnerabilities
- strands-agents-tools2 vulnerabilities
- AgentCore CLI1 vulnerability
- Amazon Bedrock AgentCore harness1 vulnerability
- Amazon Braket Python SDK1 vulnerability
- Amazon CloudFront1 vulnerability
- Amazon ECS Agent1 vulnerability
- Amazon Redshift connector for Python1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-19643MEDIUM | Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platformsAn out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862. CWE-125Aug 12, 2026 | CVSS6.0v4.0 | EPSS0.332% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-19642MEDIUM | Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppAn out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862. CWE-787Aug 12, 2026 | CVSS6.0v4.0 | EPSS0.295% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |