CVE-2026-5190 in aws-c-event-stream
요약 (영어)
Out-of-bounds write in the streaming decoder component in aws-c-event-stream before 0.6.0 might allow a third party operating a server to cause memory corruption leading to arbitrary code execution on a client application that processes crafted event-stream messages.
To remediate this issue, users should upgrade to version 0.6.0 or later.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
책임이 있는
AMZN
예약하다
2026. 03. 30.
공개
2026. 03. 31.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354457 | AWS aws-c-event-stream event-stream Message 메모리 손상 | 787 | 정의되지 않음 | 공식 수정 | CVE-2026-5190 |