A critical buffer overflow vulnerability in MOOS-IvP allows unauthenticated remote attackers to execute arbitrary code by supplying malformed function strings.

The vulnerability exists within the IvP function string decoders, which improperly trust length fields provided by the attacker. By crafting strings with mismatched length declarations, an attacker can trigger heap or stack buffer overflows, enabling remote code execution.

The ability to achieve remote code execution poses a severe threat to the confidentiality, integrity, and availability of any system running MOOS-IvP. An attacker could gain full control over the affected process, potentially leading to unauthorized data exfiltration, system compromise, or service disruption. Given the CVSS score of 9.8, this vulnerability represents a critical risk that requires immediate attention to prevent total system takeover.

Immediate Action: Update the MOOS-IvP software to the latest available version, which includes the necessary validation logic to prevent buffer overflows.

Proactive Monitoring: Monitor system logs and network traffic for anomalous entries or unexpected process crashes, which may indicate attempted exploitation of the IvP string decoders.

Compensating Controls: If immediate patching is not feasible, implement strict input validation at the network perimeter or application gateway to filter or reject malformed MOOS-IvP function strings.

Public Exploit Available: Unknown

Due to the critical nature of this vulnerability and the potential for remote code execution, organizations should prioritize updating their MOOS-IvP installations immediately. Ensure all affected systems are patched to the latest version to eliminate the risk of buffer overflow attacks. Failing to address this vulnerability promptly leaves systems exposed to severe security risks and potential full-system compromise.