CVE-2017-0564-ION-PoC

CVE-2017-0564-ION-PoC ION universal privilege escalation vulnerability PoC and analysis LINK: https://android.googlesource.com/platform/cts/+/master/hostsidetests/security/securityPatch/CVE-2017-0564/ Vulnerability reporter: guoygang...

PT-2026-144499

In aoc unlocked ioctl handle ion fd of aoc.c, there is a possible type confusion due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-124001

NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission DGR convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers...

CVE-2026-124000

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-123999

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...

CVE-2026-124001 ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR

NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission DGR convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers...

EUVD-2026-120227

NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission DGR convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers...

CVE-2026-124001

NASA JPL ION-DTN versions 2.2.1b through 4.2.0 are vulnerable to an integer overflow within the Datagram Retransmission (DGR) convergence layer. An attacker can provide a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation, leading to an unchecked memcpy...

CVE-2026-124001 ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR

NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission DGR convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-124000

NASA JPL ION-DTN versions 2.1.0 through 4.2.0 are vulnerable to a heap buffer under-allocation in the Asynchronous Message Service daemon (amsd ). The root cause is an insufficient buffer size calculation for the internal state-event object, which occurs when the daemon processes Meta-AMS (MAMS) ...

EUVD-2026-120223

NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...

CVE-2026-123999 ION-DTN 3.6.2-4.2.0 Heap Buffer Overflow via nm_mgr AMP Rendering

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...

CVE-2026-123999 ION-DTN 3.6.2-4.2.0 Heap Buffer Overflow via nm_mgr AMP Rendering

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...

CVE-2026-123999

NASA JPL ION-DTN versions 3.6.2 through 4.2.0 are vulnerable to a heap-based buffer overflow within the Network Management daemon (nm_mgr) string-formatting logic. The flaw is triggered by unbounded strcat operations when processing deeply nested AMP payloads that exceed fixed-size buffer allocat...

EUVD-2026-120222

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...

PT-2026-140966

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nm mgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocatio...

CVE-2026-123999: nasa-jpl ION-DTN: NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon (nm_mgr)…

NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon nmmgr string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocation...