A StackOverflow vulnerability (CVE-2024-21634) exists in the ion-java library versions prior to 1.10.5. This flaw can cause a denial-of-service condition when deserializing crafted Ion text or binary data or when invoking certain IonValue methods on the deserialized data. The issue is fixed in ion-java version 1.10.5.