| Package | Affected versions | Patched versions |
|---|---|---|
| moos-ivp | < 24.8.1 | 24.8.1 |
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free