CVE-2026-85449highCWE-770

CVE-2026-85449: falha de alta gravidade em moos-ivp

MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar moos-ivp

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.9%
MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowing attackers to exhaust memory by supplying unbounded distinct node names. Attackers can publish crafted NODE_REPORT data to cause memory exhaustion and stall the operator display without authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
moos-ivp · moos-ivp
CVEs relacionadas — moos-ivp

No mesmo produto, das mais perigosas para as menos.

CVE-2026-85425CRITICALMOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSEPSS 1.8%CVE-2026-85437CRITICALMOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String DecodersEPSS 1.4%CVE-2026-85438CRITICALMOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsEPSS 1.1%CVE-2026-85426CRITICALMOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client NamesEPSS 0.9%CVE-2026-85448HIGHMOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State RetentionEPSS 0.8%CVE-2026-85447HIGHMOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of ServiceEPSS 0.8%