CVE-2026-19643Patch(amazon / aws_software_development_kit)

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch amazon aws_software_development_kit systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input. To remediate this issue, users should upgrade to version 1.11.862.

amazon CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://github.com/aws/aws-sdk-cpp/releases/tag/1.11.862

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

aws_software_development_kit

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-12); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

amazon

Products

aws_software_development_kit

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://dlvr.it/TV0dhy

Classification over time

Date	Total	Labels

2026-08-12	1	Patch1
2026-08-13	1	Disclosure1

Full discourse2 posts

Xavier Rivera@XavierRiveraX46d
Patch
AWS patched two memory-safety flaws in the AWS SDK for C++ Base64 decoder. CVE-2026-19642 is an out-of-bounds write, CVE-2026-19643 an out-of-bounds read, both from crafted input, no RCE demonstrated. Fixed in SDK 1.11.862 by delegating to the AWS Common Runtime. Vendored or statically-linked builds must update the aws-crt-cpp submodule too, no workaround exists.
Post summary
AWS released patches for CVE-2026-19642 and CVE-2026-19643, addressing out‑of‑bounds write and read in the AWS SDK for C++ Base64 decoder. The updates are bundled in SDK 1.11.862 and require updating the aws-crt-cpp submodule for vendored or static builds.
0001083
598 followersView on X
Eyal Estrin ☁️@eyalestrin45d
Disclosure
CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++ https://dlvr.it/TV0dhy #patchmanagement
Post summary
The tweet announces memory‑safety vulnerabilities in AWS SDK for C++’s Base64 decoder, providing basic technical details but no PoC, exploit, or patch information.
0000053
2.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	amazon	aws_software_development_kit	-	c\+\+	-

Explore more

Back to dashboard amazon CVEs aws_software_development_kit vulnerabilities