CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java

Amazon Web Services Version 2 imported change current

Imported from official source

Bulletin ID: 2026-100-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/04/2026 12:30 PM PDT Description: ion-java is a Java library that implements the Amazon Ion data format specification. We identified CVE-2026-85786, memory-amplification denial of service via highly compressed data expansion. …

This version

Version: 2 of 2
Recorded: September 18, 2026 09:42
Change: Imported change
Content hash: 8ba2923e293e3b70b1ed3e0e0a5b5a9e
All versions: Revision history