CVE-2026-85445: MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resources and causing service unavailability.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and requires no privileges or user interaction. An attacker needs to send mux packets with an arbitrarily large packet count declared in the header.
What is the expected impact of successful exploitation?
Successful exploitation can cause unbounded memory allocation and exhaust system resources, making the affected service unavailable. The provided impact information indicates availability impact only, with no stated confidentiality or integrity impact.
Which deployments should be prioritized for remediation?
Prioritize MOOS-IvP deployments through version 24.8.1 that accept mux packets from untrusted or network-accessible sources. The provided data does not state whether any particular default configuration exposes the vulnerable packet-processing path.