Amazon Ion vulnerabilities
We track 3 vulnerabilities in Amazon Ion products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.
Latest Amazon Ion vulnerabilities
- 7.5 High severity
Amazon Ion Java: Improper Handling of Highly Compressed Data (Data Amplification)
Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon deco
- 7.5 High severity
Amazon Ion Java: Memory Allocation with Excessive Size Value
Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation
- 7.5 High severity
ion-java: Allocation of Resources Without Limits or Throttling
Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in `ion-java` for applications that use `ion-java` to deserialize Ion text encoded data, or deserialize Ion text or binary encoded