CVE-2026-85445

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85445

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85445.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85445

Published

2026-09-03T22:38:34.486Z

Modified

2026-09-06T08:03:30.255990Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count

Details

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resources and causing service unavailability.

Database specific

{
    "cwe_ids": [
        "CWE-789"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85445.json"
}

References

Affected packages

Git / github.com/moos-ivp/moos-ivp

Affected ranges

Type

GIT

Repo

https://github.com/moos-ivp/moos-ivp

Events

Introduced

Fixed

477be7e91bf220185d55e5a2a9dba16dbde32c3f

Fixed

fc5649ac12915f66a9f09520cdb6b14bc6d77595

Database specific

Show details

{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "24.8.1"
        }
    ]
}

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp",
            "function": "showReleaseInfo"
        },
        "deprecated": false,
        "id": "CVE-2026-85445-17eb9c04",
        "signature_version": "v1",
        "digest": {
            "function_hash": "205105793825430045765894660149070176882",
            "length": 721.0
        },
        "signature_type": "Function",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/pMarineViewer/main.cpp"
        },
        "deprecated": false,
        "id": "CVE-2026-85445-703d642b",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "71475089026327374911439190140854268963",
                "288109013441206453595364179806630758895",
                "108583411300907172617501463823770114997",
                "17171581118612079636848717634386598063"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/pMarineViewer/main.cpp",
            "function": "main"
        },
        "deprecated": false,
        "id": "CVE-2026-85445-9c0df7cc",
        "signature_version": "v1",
        "digest": {
            "function_hash": "118965062358282729215132681048895208743",
            "length": 2942.0
        },
        "signature_type": "Function",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp"
        },
        "deprecated": false,
        "id": "CVE-2026-85445-b57c450a",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "221566291563585211413467636629101977597",
                "69881209764151303531923320257498233409",
                "153719805825789704065453832941046288979",
                "196362707078072643545117675400601289962"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85445.json"

vanir_signatures_modified

"2026-09-06T08:03:30Z"