CVE-2026-85448 — MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher …
Published: 2026-09-03 · CVSS: 8.7 · CVSS 4.0
MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing(). A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory exhaustion and performance degradation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7