CVE-2026-85449

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85449

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85449.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85449

Published

2026-09-03T22:38:37.101Z

Modified

2026-09-05T08:07:38.201020Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT

Details

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODEREPORT messages, allowing attackers to exhaust memory by supplying unbounded distinct node names. Attackers can publish crafted NODEREPORT data to cause memory exhaustion and stall the operator display without authentication.

Database specific

{
    "cwe_ids": [
        "CWE-770"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85449.json"
}

References

Affected packages

Git / github.com/moos-ivp/moos-ivp

Affected ranges

Type

GIT

Repo

https://github.com/moos-ivp/moos-ivp

Events

Introduced

Fixed

477be7e91bf220185d55e5a2a9dba16dbde32c3f

Fixed

4d8d0693d3f8bf8907dc0aed04ea488d85af9f22

Database specific

Show details

{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "24.8.1"
        }
    ]
}

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp",
            "function": "showReleaseInfo"
        },
        "deprecated": false,
        "id": "CVE-2026-85449-17eb9c04",
        "signature_version": "v1",
        "digest": {
            "function_hash": "205105793825430045765894660149070176882",
            "length": 721.0
        },
        "signature_type": "Function",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/pMarineViewer/main.cpp"
        },
        "deprecated": false,
        "id": "CVE-2026-85449-703d642b",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "71475089026327374911439190140854268963",
                "288109013441206453595364179806630758895",
                "108583411300907172617501463823770114997",
                "17171581118612079636848717634386598063"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/pMarineViewer/main.cpp",
            "function": "main"
        },
        "deprecated": false,
        "id": "CVE-2026-85449-9c0df7cc",
        "signature_version": "v1",
        "digest": {
            "function_hash": "118965062358282729215132681048895208743",
            "length": 2942.0
        },
        "signature_type": "Function",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    },
    {
        "target": {
            "file": "ivp/src/lib_mbutil/ReleaseInfo.cpp"
        },
        "deprecated": false,
        "id": "CVE-2026-85449-b57c450a",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "221566291563585211413467636629101977597",
                "69881209764151303531923320257498233409",
                "153719805825789704065453832941046288979",
                "196362707078072643545117675400601289962"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/moos-ivp/moos-ivp/commit/477be7e91bf220185d55e5a2a9dba16dbde32c3f"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85449.json"

vanir_signatures_modified

"2026-09-05T08:07:38Z"