Vulnerability · Published Sep 2, 2026 · Assigned by VulnCheck
CVE-2026-84484ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv
High 7.5
In plain English
A high-severity out-of-bounds read in ION-DTN from nasa-jpl. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 41.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.
Affected products (as reported)
Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- GitHub Security Advisory (GHSA-85pw-28vw-2jf7) vendor-advisory
- Patch Commit patch
- ION-DTN ion-open-source-4.2.0 Release Notes release-notes
- https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.4/ici/library/platform.c#L1982 technical-description
- https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.4/ici/library/ion.c#L1693 technical-description
- https://github.com/nasa-jpl/ION-DTN product
- VulnCheck Advisory: ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv third-party-advisory