Beveiligingsadvies
CVE-2026-85444
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.