CVE-2026-84484

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-84484

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-84484.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-84484

Aliases

GHSA-85pw-28vw-2jf7

Published

2026-09-02T01:18:14.970Z

Modified

2026-09-04T14:03:38.473535Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv

Details

ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/84xxx/CVE-2026-84484.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "fixed": "4.2.0"
                }
            ]
        },
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "4.2.0"
                }
            ]
        }
    ],
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-125"
    ]
}

References

Affected packages

Git / github.com/nasa-jpl/ion-dtn

Affected ranges

Type

GIT

Repo

https://github.com/nasa-jpl/ion-dtn

Events

Introduced

Fixed

d52d22bdd383798712357f86a2778757f740e812

Fixed

568df887cb9f18aa8ec013b1a566d83215e499ae

Database specific

Show details

{
    "source": "REFERENCES"
}

Affected versions

IOS-4.*

IOS-4.1.1

ion-2.*

ion-2.1.0

ion-2.2.0

ion-2.2.1

ion-2.2.1b

ion-2.3.0

ion-2.4.0

ion-2.5.0

ion-3.*

ion-3.0.0

ion-3.1.0

ion-3.2.0

ion-3.3.0

ion-3.4.0

ion-3.5.0

ion-3.6.0

ion-4.*

ion-4.1.1-release

ion-open-source-4.*

ion-open-source-4.1.1

ion-open-source-4.1.2

ion-open-source-4.1.3

ion-open-source-4.1.4

ion-open-source-4.1.4-a.1

ion-open-source-4.1.4-a.2

ion-open-source-4.1.4-b.1

ion-open-source-4.1.4-b.2

ion-open-source-4.2.0-a.1

ion-open-source-4.2.0-a.2

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 604.0,
            "function_hash": "248404133190925871024720012040563594466"
        },
        "id": "CVE-2026-84484-0d2fa517",
        "target": {
            "function": "_extractSmallSdnv",
            "file": "ici/library/ion.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 3169.0,
            "function_hash": "300116073967617618556982858514521892109"
        },
        "id": "CVE-2026-84484-1782cb5b",
        "target": {
            "function": "parseTopic",
            "file": "dtpc/library/libdtpcP.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "50095772379432339210592441205127271",
                "178775390500135167199319455732882026175",
                "336983193023512963802474209779112694419"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-84484-30c6a144",
        "target": {
            "file": "ici/library/platform.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "33709644875659867437612474468953724793",
                "269614389518315163412576750802219078031",
                "109393855149490949446341822472341970555",
                "101397386327532176940505218475282238480",
                "232593188294365304884739844918940427827",
                "249742370804218607563537237174239134191",
                "247217958142149393530216304341788631056",
                "145921182485422260270198068828492281499",
                "167538477849333081551359605343068044562",
                "8974954015195745440574418861965029983",
                "55579499643599468224058818552048979288",
                "29061618311167544123628713836221021139",
                "121857709836273274898028044306781772189",
                "190855594818916309485810949995405175564",
                "305088542602695320749524965100177511861",
                "53640151258906541347363532273497710226",
                "336032221646431551151784216157101599968",
                "33958542106417221518903517465965767081",
                "145703846573226582119920703973466999719"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-84484-384699d9",
        "target": {
            "file": "ici/library/ion.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "245324638392612078226253958533556243480",
                "111194499035532746206739523717623993229",
                "253238044741753690776374505858836140638",
                "155911942141980513114716155806729017590",
                "288296438758723082051869383540923788109",
                "52552361863511961576803810287201568923",
                "81093577803640967958267701673328373849",
                "172437990172952321775000601991435630111",
                "285245926698747207963733661940719421680",
                "170023372023522641127647546895386698846",
                "338655555441370959819943822524808071446",
                "178097850406485540444432356495378778243",
                "154331640142197299921872249009107708698",
                "98877159753819860540263211179578186978",
                "272093703942276070466901370368590136937",
                "192921957860495986565883267379559311870"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-84484-44bf1e29",
        "target": {
            "file": "dtpc/library/libdtpcP.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151622091777110331723978614627586213582",
                "156045127409004524497302227757183030440",
                "116483294342728623553877336973849710054",
                "30775343027633546431228838341642518314"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-84484-663fb717",
        "target": {
            "file": "ici/include/platform.h"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 432.0,
            "function_hash": "244288095597613629619986812577056194056"
        },
        "id": "CVE-2026-84484-7d6e7e6b",
        "target": {
            "function": "_extractSdnv",
            "file": "ici/library/ion.c"
        },
        "source": "https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812",
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-84484.json"

vanir_signatures_modified

"2026-09-04T14:03:38Z"