← Database

CVE-2026-85444

HIGH CVSS: 7.5 Published: 2026-09-03 Modified: 2026-09-08

Description

MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.

Affected Platforms

Unknown

Weakness Type

CWE-125

References