CVE-2026-84484highCWE-125

CVE-2026-84484: falha de alta gravidade em nasa-jpl ION-DTN

ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ION-DTN

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.9%
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
nasa-jpl · ION-DTN
CVEs relacionadas — nasa-jpl ION-DTN

No mesmo produto, das mais perigosas para as menos.

CVE-2026-75584HIGHION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() AssertionEPSS 0.6%CVE-2024-54129CRITICALImproper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7EPSS 0.4%CVE-2024-54130CRITICALSegmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)EPSS 0.4%CVE-2025-61910HIGHNASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-ServiceEPSS 0.4%