Vulnerability Bulletins |
CVE-2025-3857 - Infinite loop condition in Amazon.IonDotnet |
|
| Affected software | AmazonWS |
|
Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/04/21 08:00 AM PDT Description Amazon.IonDotnet (ion-dotnet) is a .NET library with an implementation of the Ion data serialization format. We identified CVE-2025-3857, an infinite loop condition in Amazon.IonDotnet. When reading binary Ion data through this library using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary More info: https://aws.amazon.com/security/security-bulletins/AWS-2025-009/ |
|