Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users should upgrade to version 1.12.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-18 | 1 | General1 |
| 2026-08-20 | 1 | Disclosure1 |
CVE-2026-75935 & CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service https://dlvr.it/TV606j #patchmanagement
Post summary
The tweet announces two new CVE identifiers for a memory amplification denial-of-service vulnerability in Amazon’s ion-java library, with no PoC, exploit, or patch details provided.
CVE-2026-75935 Denial Of Service in Amazon ion-java Before 1.12.0 Via Cr... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75935 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet mentions CVE‑2026‑75935 as a denial‑of‑service flaw in Amazon ion-java versions before 1.12.0, but provides no details on PoC, exploitation, or remediation.