MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded… (CVE-2026-85438)

The vulnerability in MOOS-IvP (up to version 24.8.1) is a buffer overflow in the StringToIvPFunction() where unvalidated dimension, piece, and degree counts from encoded BHV_IPF payloads are used to allocate memory and control loops. An attacker can supply specially crafted payloads with mismatched dimension values to write attacker-controlled double values beyond the IvPBox weight array boundary, causing memory corruption and possibly enabling arbitrary code execution. The CVSS 3.1 base score is 9.8, indicating a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and full confidentiality, integrity, and availability impact.

Successful exploitation can lead to memory corruption and potentially arbitrary code execution on the affected system. The vulnerability allows remote attackers to execute code without any privileges or user interaction, impacting confidentiality, integrity, and availability of the system running MOOS-IvP through 24.8.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, avoid processing untrusted BHV_IPF payloads or apply any vendor-recommended mitigations once published.