CVE-2026-85438

Received Received - Intake

Buffer Overflow in MOOS-IvP Due to Unvalidated BHV_IPF Payload

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded BHV_IPF payloads are used as allocation sizes and loop bounds without validation. Attackers can supply crafted payloads with mismatched dimension values to write attacker-controlled doubles past the end of the IvPBox weight array, causing memory corruption and potential code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85438

Affected Vendors & Products

Vendor	Product	Version / Range
moos-ivp	moos-ivp	to 24.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

MOOS-IvP through 24.8.1 has a buffer overflow in StringToIvPFunction() where dimension, piece, and degree counts from BHV_IPF payloads are used for memory allocation and loop bounds without validation. Attackers can send crafted payloads with mismatched dimension values to write controlled data past the IvPBox weight array, leading to memory corruption and potential code execution.

Detection Guidance

This vulnerability involves a buffer overflow in MOOS-IvP's StringToIvPFunction() due to improper handling of BHV_IPF payload dimensions. Detection requires analyzing payload parsing in MOOS-IvP versions up to 24.8.1. No specific network or system commands are provided in the context to detect this issue directly.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary code or crash the application by sending specially crafted payloads. If exploited, it could lead to unauthorized system access, data theft, or denial of service on systems running vulnerable MOOS-IvP versions.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA due to its high severity (CVSS 9.3-9.8) allowing memory corruption and code execution. Such vulnerabilities may lead to unauthorized data access, processing, or disclosure, violating GDPR's data protection principles and HIPAA's security requirements for protected health information.

Mitigation Strategies

Update MOOS-IvP to version 24.8.1 or later to address the buffer overflow vulnerability in StringToIvPFunction().

Hi! I’m here to help you understand CVE-2026-85438. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70