What is CVE-2026-19643?

CVE-2026-19643 is a medium-severity vulnerability in Aws Aws-sdk-cpp, classified under Out-of-bounds Read. CVSS score: 5.3/10. Published 2026-08-12.

How severe is CVE-2026-19643?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Out-of-bounds Read in Aws Aws-sdk-cpp

CVE-2026-19643

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this i…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Aws Aws-sdk-cpp — versions 0

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes, patch)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes)

Frequently asked questions

What is CVE-2026-19643?: CVE-2026-19643 is a medium-severity vulnerability in Aws Aws-sdk-cpp, classified under Out-of-bounds Read. CVSS score: 5.3/10. Published 2026-08-12.
How severe is CVE-2026-19643?: Medium severity. CVSS v3 base score is 5.3 out of 10.