CyberRota Analysis
AI-GeneratedMultiple buffer overflow vulnerabilities in the IvP function string decoders of MOOS-IvP versions up to 24.8.1 allow attackers to exploit unvalidated length fields, leading to potential remote code execution. This critical vulnerability affects unspecified products that utilize the MOOS-IvP framework. Organizations using this software should prioritize immediate patching and mitigation efforts to safeguard against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack buffers, potentially achieving remote code execution through MOOS variables or alog files.