Denial of Service issue in Amazon.IonDotnet

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-11573 · Microsoft / collected KEV context

GHSA-q5r6-9qwq-g2wj

cve-program · CVE-2025-11573

• https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.2
• https://aws.amazon.com/security/security-bulletins/AWS-2025-022/
• https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-q5r6-9qwq-g2wj

nvd · CVE-2025-11573

• https://aws.amazon.com/security/security-bulletins/AWS-2025-022/
• https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.2
• https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-q5r6-9qwq-g2wj

osv · GHSA-q5r6-9qwq-g2wj

• https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-q5r6-9qwq-g2wj
• https://nvd.nist.gov/vuln/detail/CVE-2025-11573
• https://github.com/amazon-ion/ion-dotnet/pull/160
• https://github.com/amazon-ion/ion-dotnet/commit/edaff75fe5abbb71e647bed812c608c0c5e2fbab
• https://aws.amazon.com/security/security-bulletins/AWS-2025-022
• https://github.com/amazon-ion/ion-dotnet
• https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.2

No related operational record is retained in the current change model.