Vulnerability · Published Sep 3, 2026 · Assigned by VulnCheck

CVE-2026-85437MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

Critical 9.8

In plain English

A critical-severity out-of-bounds write in moos-ivp from moos-ivp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)1.4%top 26.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack buffers, potentially achieving remote code execution through MOOS variables or alog files.

Affected products (as reported)

Vendor	Product	Versions
moos-ivp	moos-ivp	0 – through 24.8.1

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Pull Request #125 issue-tracking, patch
Proposed fix commit (pull request not merged) patch
https://github.com/moos-ivp/moos-ivp product
FunctionEncoder.cpp (verified sink) technical-description
VulnCheck Advisory: MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders third-party-advisory