CyberRota Analysis
AI-GeneratedThe uncontrolled memory allocation vulnerability in the Ion stream cursor of Amazon's ion-java library prior to version 1.12.0 can be exploited by remote attackers through specially crafted Ion binary documents, potentially leading to denial of service due to excessive heap preallocation. Organizations utilizing this Java library, especially those handling untrusted input, should prioritize upgrading to version 1.12.0 to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users should upgrade to version 1.12.0.