CVE-2026-75615

A flaw was found in ASN1SCC. The runtime and generated string decoders fail to properly validate decoded character indices against the allowed character set before memory access. A remote attacker could exploit this vulnerability by sending a specially crafted message, triggering an out-of-bounds...

CVE-2026-75615 ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decoders

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the ACN runtime function AcnDecStringCharIndexprivate in asn1crt/asn1crtencodingacn.c and the generated uPER decoder InternalItemstringwithalphadecode in StgC/uperc.stg do not validate a decoded character index befor...

CVE-2026-75615

The ASN1SCC open-source ASN.1 compiler for embedded systems is vulnerable to an out-of-bounds read in versions prior to 4.7.0.1 . The root cause is a lack of validation for a decoded character index within the ACN runtime function Acn_Dec_String_CharIndex_private (in asn1crt/asn1crt_encoding_acn....

EUVD-2026-70803

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85437

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85437

MOOS-IvP through version 24.8.1 is affected by multiple buffer overflow vulnerabilities in its IvP function string decoders (specifically in FunctionEncoder.cpp). The root cause is that decoders trust attacker-controlled length fields without validation, allowing an attacker to craft malicious en...

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85437: Out-of-bounds Write

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...