Is CVE-2026-84851 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-84851?

CVE-2026-84851 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-84851

Description

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service.