🚨 CVE-2026-85444
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.
🎖@cveNotify
GitHub
GitHub - moos-ivp/moos-ivp: MOOS-IvP is a set of modules for providing autonomy on robotic platforms, in particular autonomous…
MOOS-IvP is a set of modules for providing autonomy on robotic platforms, in particular autonomous marine vehicles. - moos-ivp/moos-ivp
September 5, 2026 47
