CVE-2026-124001

Name of the Vulnerable Software and Affected Versions NASA JPL ION-DTN versions 2.2.1b through 4.2.0

Description An integer overflow exists in the Datagram Retransmission (DGR) convergence layer. A remote attacker can corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. This issue is triggered via an unchecked memcpy operation in the dgr receive() function using synthetic datagrams or DGR traffic over internal IPC or custom transports, resulting in an out-of-bounds write. This can lead to a denial of service or potential remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.