What is CVE-2026-19642?

CVE-2026-19642 is a medium-severity vulnerability in Aws Aws-sdk-cpp, classified under Out-of-bounds Write. CVSS score: 5.9/10. Published 2026-08-12.

How severe is CVE-2026-19642?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Buffer overflow in Aws Aws-sdk-cpp

CVE-2026-19642

An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input. T…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H.

Affected products

Aws Aws-sdk-cpp — versions 0

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes, patch)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes)

Frequently asked questions

What is CVE-2026-19642?: CVE-2026-19642 is a medium-severity vulnerability in Aws Aws-sdk-cpp, classified under Out-of-bounds Write. CVSS score: 5.9/10. Published 2026-08-12.
How severe is CVE-2026-19642?: Medium severity. CVSS v3 base score is 5.9 out of 10.