Executive brief
MOOS-IvP is an autonomy platform used to control robotic systems, particularly autonomous marine vehicles. A buffer overflow vulnerability in the StringToIvPFunction function allows attackers to send malicious payloads that write beyond allocated memory boundaries, potentially leading to system crashes or arbitrary code execution on affected robotic platforms.
Technical details
The vulnerability is a classic buffer overflow in the StringToIvPFunction() routine where dimension, piece, and degree counts extracted from encoded BHV_IPF payloads are used directly as allocation sizes and loop bounds without validation. An attacker can craft a malicious payload with mismatched dimension values to cause the code to write attacker-controlled double-precision values past the end of the IvPBox weight array, resulting in heap corruption. The attack is network-reachable against systems processing untrusted IvP payloads and does not require authentication. Successful exploitation enables memory corruption and potential remote code execution.
Affected products
- MOOS-IvP MOOS-IvP through 24.8.1
Timeline
- 2026-09-03: disclosed