4 matches found
EUVD-2026-70783
MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODEREPORT messages, allowing attackers to exhaust memory by supplying unbounded distinct node names. Attackers can publish crafted NODEREPORT data to cause memory exhaustion and stall the operator...
EUVD-2026-70778
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted, isBraced, and isChevroned functions that strip whitespace but index using the original string length. Attackers can send NODEREPORT messages with leading or trailing whitespace to read past buffer bounds and access...
CVE-2026-85449
MOOS-IvP pMarineViewer through version 24.8.1 is vulnerable to unbounded memory consumption via NODE_REPORT messages. The component fails to limit the number of tracked node identities, so an attacker can publish crafted data with distinct node names to exhaust memory and stall the operator displ...
CVE-2026-85444
MOOS-IvP through version 24.8.1 contains a buffer over-read vulnerability in the isQuoted(), isBraced(), and isChevroned() functions within MBUtils.cpp. These functions strip whitespace from input but then index using the original string length , causing reads past buffer bounds. An attacker can ...