Unbounded Memory Consumption in MOOS-IvP pMarineViewer Affects Multiple Versions

CVE-2026-85449

What is CVE-2026-85449?

The pMarineViewer component of MOOS-IvP, prior to version 24.8.1, is susceptible to an unbounded memory consumption vulnerability. This issue arises from the failure to limit the number of unique node identities in NODE_REPORT messages, allowing for an attacker to maliciously exploit this by sending numerous distinct node names. Such exploitation can result in memory exhaustion, effectively stalling the operator's display. This vulnerability does not require authentication, making it particularly severe as it can be executed without any user credentials.

References