CVE-2026-85438

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2

Description A buffer overflow exists in the StringToIvPFunction() function. The issue occurs when dimension, piece, and degree counts from encoded BHV IPF payloads are used as allocation sizes and loop bounds without proper validation. An attacker can provide crafted payloads with mismatched dimension values to write controlled doubles beyond the end of the IvPBox weight array, leading to memory corruption and potential code execution.

Recommendations Update MOOS-IvP to version 24.8.2 or later.