CyberRota Analysis
AI-GeneratedA buffer overflow vulnerability exists in the StringToIvPFunction() of MOOS-IvP versions up to 24.8.1, where unvalidated dimension, piece, and degree counts from encoded BHV_IPF payloads can lead to memory corruption and potential code execution. Attackers can exploit this flaw by supplying crafted payloads, allowing them to manipulate memory beyond allocated bounds. Organizations using affected versions should prioritize immediate patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded BHV_IPF payloads are used as allocation sizes and loop bounds without validation. Attackers can supply crafted payloads with mismatched dimension values to write attacker-controlled doubles past the end of the IvPBox weight array, causing memory corruption and potential code execution.