Vulnerability Details
Basic Information
| Title | Infinite loop condition in Amazon.IonDotnet |
|---|---|
| Type | github |
| Published | 2025-04-21T16:19:20 |
| Last Seen | 2025-04-21T18:43:33 |
| CVSS Score | 7.5 (HIGH) |
CVSS v3 Details
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
CVE Information
| CVE IDs | CVE-2025-3857 |
|---|---|
| CWE | CWE-502, CWE-835 |
| Bulletin Family | software |
Description
Summary Amazon.IonDotnet (ion-dotnet) is a .NET library with an implementation of the Ion data serialization format. An issue exists in Amazon.IonDotnet and the RawBinaryReader class where, under certain conditions, an actor could trigger an infinite…
Impact Assessment
| Base Score | 7.5 |
|---|---|
| Severity | HIGH |