CVE-2026-85437

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85437

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85437.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85437

Published

2026-09-03T22:38:29.210Z

Modified

2026-09-05T08:07:36.973328Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

Details

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack buffers, potentially achieving remote code execution through MOOS variables or alog files.

Database specific

{
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85437.json",
    "cwe_ids": [
        "CWE-787"
    ]
}

References

Affected packages

Git / github.com/moos-ivp/moos-ivp

Affected ranges

Type

GIT

Repo

https://github.com/moos-ivp/moos-ivp

Events

Introduced

Fixed

477be7e91bf220185d55e5a2a9dba16dbde32c3f

Fixed

81ca795fcfd62b42002d277f5a2390f4c8ab8c7f

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "24.8.1"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Database specific

vanir_signatures_modified

"2026-09-05T08:07:36Z"

vanir_signatures

[
    {
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f",
        "target": {
            "function": "showReleaseInfo",
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp"
        },
        "signature_version": "v1",
        "id": "CVE-2026-85437-17eb9c04",
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "205105793825430045765894660149070176882",
            "length": 721.0
        }
    },
    {
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f",
        "target": {
            "file": "ivp/src/pMarineViewer/main.cpp"
        },
        "signature_version": "v1",
        "id": "CVE-2026-85437-703d642b",
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "71475089026327374911439190140854268963",
                "288109013441206453595364179806630758895",
                "108583411300907172617501463823770114997",
                "17171581118612079636848717634386598063"
            ]
        }
    },
    {
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f",
        "target": {
            "function": "main",
            "file": "ivp/src/pMarineViewer/main.cpp"
        },
        "signature_version": "v1",
        "id": "CVE-2026-85437-9c0df7cc",
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "118965062358282729215132681048895208743",
            "length": 2942.0
        }
    },
    {
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f",
        "target": {
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp"
        },
        "signature_version": "v1",
        "id": "CVE-2026-85437-b57c450a",
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "221566291563585211413467636629101977597",
                "69881209764151303531923320257498233409",
                "153719805825789704065453832941046288979",
                "196362707078072643545117675400601289962"
            ]
        }
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85437.json"