Out-of-Bounds Write Vulnerability in AWS SDK for C++
CVE-2026-19642

6MEDIUM

Key Information:

Vendor

Aws

Status
Aws-sdk-cpp
Vendor
CVE Published:
12 August 2026

What is CVE-2026-19642?

An out-of-bounds write vulnerability exists in the Base64 decoder of the AWS SDK for C++ prior to version 1.11.862. This flaw can be exploited by a remote authenticated user to potentially cause a crash or corruption of heap memory in applications processing specially crafted Base64-encoded data. To mitigate this issue, users are strongly advised to upgrade to version 1.11.862 or later.

Affected Version(s)

aws-sdk-cpp 0 <= 1.11.861

References

https://github.com/aws/aws-sdk-cpp/releases/tag/1.11.862
release-notespatch
https://aws.amazon.com/security/security-bulletins/2026-0...
vendor-advisory
https://github.com/aws/aws-sdk-cpp/security/advisories/GH...
release-notes

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

University of Manchester
.