Amazon Aws Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Amazon Aws Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-19981 — CVSS 7.2 (high): Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS…
• CVE-2023-51651 — CVSS 6.0 (medium): AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes…
• CVE-2026-19642 — CVSS 5.9 (medium): An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a…
• CVE-2022-4725 — CVSS 5.5 (medium): A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file…
• CVE-2026-19643 — CVSS 5.3 (medium): An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote…
• CVE-2022-2582 — CVSS 4.3 (medium): The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to…