AWS SDK for C++ Base64 Decoder Vulnerabilities Require Immediate Update
AWS SDK for C++ versions up to 1.11.861 contain two memory-safety bugs (CVE-2026-19642 and CVE-2026-19643) in the Base64 decoder that could crash your app or corrupt memory. CVE-2026-19642 causes out-of-bounds writes, while CVE-2026-19643 triggers out-of-bounds reads on certain platforms. Yes, you need to act—update your SDK immediately if you're using an affected version. Remote code execution hasn't been demonstrated, but the impact is real for any process decoding untrusted Base64 data.
source: [aws/security-bulletin]