CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++
Sdk For ยท 2026-10-21
Actions
Technical Details
| Affected Versions | <= 1.11.861 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-19642, CVE-2026-19643 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the AWS SDK for C++ to version 1.11.862 to address critical memory-safety issues in the Base64 decoder, ensuring that applications are secure and stable.
For Platform Teams
Adopt the updated AWS SDK for C++ version 1.11.862 to integrate the new Base64 implementation from the AWS Common Runtime, enhancing security and stability of the platform.
For Executives
Implement the upgrade to AWS SDK for C++ version 1.11.862 to mitigate security risks associated with CVE-2026-19642 and CVE-2026-19643, ensuring application stability and reducing the risk of crashes or memory corruption.
Source
Related Sdk For Updates
- CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (2026-10-14)
- CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (2026-09-29)
- Introducing SDK Client Warm-Up feature in the AWS SDK for Java 2.x (2026-09-25)
- CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (2026-09-25)
- CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (2026-09-24)