What is 2026-083-AWS?

2026-083-AWS is a security advisory published by AWS Security Bulletins with High severity. CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service

Which CVE IDs does 2026-083-AWS cover?

2026-083-AWS covers the following CVE IDs: CVE-2026-75935, CVE-2026-75936. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-083-AWSHigh

CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service

Vendor

AWS Security Bulletins

Published

August 18, 2026

Last Modified

—

🔗 CVE IDs covered (2)

CVE-2026-75935 →CVE-2026-75936 →

📋 Description

Bulletin ID: 2026-083-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/18/2026 12:30 PM PDT Description: ion-java is a Java library that implements the Amazon Ion data format specification. We identified CVE-2026-75935, memory-amplification denial of service via declared-length preallocation, and CVE-2026-75936, memory-amplification denial of service via highly compressed data expansion. Affected versions:
Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-083-aws/