CVE-2026-124001 PUBLISHED

ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR

Assigner: VulnCheck
Reserved: 06.11.2026 Published: 09.11.2026 Updated: 09.11.2026

NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR) convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers can exploit the dgr_receive API's unchecked memcpy operation using synthetic datagrams or DGR traffic over internal IPC or custom transports to trigger an out-of-bounds write, leading to denial of service or potential remote code execution.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 9.2

Product Status

Vendor nasa-jpl
Product ION-DTN
Versions Default: unaffected
  • affected from 2.2.1b to 4.2.0 (incl.)
  • Version 4.2.1-a.2 is unaffected

Credits

  • SecMate (secmate.dev) finder

References

Problem Types

  • Integer Overflow or Wraparound CWE
  • Out-of-bounds Write CWE