CVE-2026-19642: Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp
An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input.
To remediate this issue, users should upgrade to version 1.11.862.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Amazon aws-sdk-cppto a version that resolves this vulnerability.Fixed in 1.11.862
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19642?
The severity of CVE-2026-19642 is medium with a score of 5.9.
What risks are associated with CVE-2026-19642?
CVE-2026-19642 may allow a remote authenticated user to cause a crash or heap memory corruption in applications processing crafted Base64-encoded input.
How do I fix CVE-2026-19642?
To fix CVE-2026-19642, upgrade to version 1.11.862 of the aws-sdk-cpp.
What software is affected by CVE-2026-19642?
The affected software is aws-sdk-cpp prior to version 1.11.862.
When was CVE-2026-19642 published?
CVE-2026-19642 was published on August 12, 2026.