{"id":"CVE-2026-85444","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-85444","summary":"MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned","details":"MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that strip whitespace but index using the original string length. Attackers can send NODE_REPORT messages with leading or trailing whitespace to read past buffer bounds and access adjacent memory.","published":"2026-09-03T22:38:33.845Z","modified":"2026-09-04T11:46:03.988755116Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/moos-ivp/moos-ivp/commit/faff8adfa1a69d68614461f679ebbc1d741c51aa","label":"moos-ivp/moos-ivp@faff8ad"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85444.json"},{"type":"PACKAGE","url":"https://github.com/moos-ivp/moos-ivp"},{"type":"ARTICLE","url":"https://github.com/moos-ivp/moos-ivp/blob/1de9ae146cd63c209e8c3fd81611a4ed2472971b/ivp/src/lib_mbutil/MBUtils.cpp#L1710"},{"type":"FIX","url":"https://github.com/moos-ivp/moos-ivp/commit/faff8adfa1a69d68614461f679ebbc1d741c51aa"},{"type":"FIX","url":"https://github.com/moos-ivp/moos-ivp/pull/128"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85444"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/moos-ivp-through-24.8.1-out-of-bounds-read-in-isbraced-isquoted-and-ischevroned"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-04T11:46:03.988755116Z"}}