Out-of-Bounds Read Vulnerability in ION-DTN by NASA JPL
CVE-2026-84484

8.7HIGH

Key Information:

Vendor

Nasa-jpl

Status
Ion-dtn
Vendor
CVE Published:
2 September 2026

What is CVE-2026-84484?

ION-DTN versions prior to 4.2.0 are susceptible to an out-of-bounds read vulnerability within the decodeSdnv function. This security flaw allows unauthenticated remote attackers to access sensitive memory by sending crafted UDP datagrams containing truncated SDNV values. By triggering reads beyond the expected buffer boundaries, attackers can potentially manipulate memory data, leading to unauthorized information disclosure and other security issues.

Affected Version(s)

ION-DTN 0 < 4.2.0

References

https://github.com/nasa-jpl/ION-DTN/security/advisories/G...
vendor-advisory
https://github.com/nasa-jpl/ION-DTN/commit/d52d22bdd38379...
patch
https://github.com/nasa-jpl/ION-DTN/releases/tag/ion-open...
release-notes

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dilipkumar Choudhary
.