Heap Buffer Under-allocation Vulnerability in NASA JPL ION-DTN Products

CVE-2026-124000

What is CVE-2026-124000?

The ION-DTN software developed by NASA JPL contains a vulnerability in the Asynchronous Message Service daemon (amsd) that arises from a flawed heap buffer under-allocation. This weakness allows malicious or misconfigured devices to exploit the vulnerability by sending specially crafted Meta-AMS configuration management messages. Due to the lack of cryptographic authentication in the message processing, an attacker can trigger an out-of-bounds write leading to a denial of service. This incident can destabilize future shared-memory allocations within the amsd process, posing a significant risk to system reliability.

References