Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-11573

Good to know:

icon
icon

Date: October 9, 2025

An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not receive further updates.

Severity Score

Related Resources (9)

https://nvd.nist.gov/vuln/detail/CVE-2025-11573
https://aws.amazon.com/security/security-bulletins/AWS-2025-022/
https://github.com/amazon-ion/ion-dotnet/pull/160
https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.2
https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-q5r6-9qwq-g2wj
https://github.com/amazon-ion/ion-dotnet/commit/edaff75fe5abbb71e647bed812c608c0c5e2fbab
https://github.com/amazon-ion/ion-dotnet
https://aws.amazon.com/security/security-bulletins/AWS-2025-022
https://www.mend.io/vulnerability-database/CVE-2025-11573

Severity Score

Weakness Type (CWE)

Uncontrolled Resource Consumption

CWE-400

Improper Validation of Syntactic Correctness of Input

CWE-1286

Top Fix

icon

Upgrade Version

Upgrade to version amazon.iondotnet - 1.3.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us