CVE-2025-12829

MEDIUM
STIX 2.1 vulnerability

Record summary

CVE-2025-12829 has a selected CVSS score of 6.9 (medium).

Description

An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 7, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ion-C

Browse Amazon / Ion-C

Default status: unaffected

CVE List1.1.4unaffected

References

3