{"id":"CVE-2026-84484","summary":"ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv","details":"ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.","aliases":["GHSA-85pw-28vw-2jf7"],"modified":"2026-09-04T14:03:38.473535Z","published":"2026-09-02T01:18:14.970Z","database_specific":{"cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/84xxx/CVE-2026-84484.json","unresolved_ranges":[{"extracted_events":[{"fixed":"4.2.0"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"fixed":"4.2.0"}],"source":"DESCRIPTION"}],"cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/84xxx/CVE-2026-84484.json"},{"type":"ADVISORY","url":"https://github.com/nasa-jpl/ION-DTN/releases/tag/ion-open-source-4.2.0"},{"type":"ADVISORY","url":"https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-85pw-28vw-2jf7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84484"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/ion-dtn-before-4.2.0-out-of-bounds-read-via-decodesdnv"},{"type":"FIX","url":"https://github.com/nasa-jpl/ION-DTN/commit/d52d22bdd383798712357f86a2778757f740e812"},{"type":"PACKAGE","url":"https://github.com/nasa-jpl/ION-DTN"},{"type":"ARTICLE","url":"https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.4/ici/library/ion.c#L1693"},{"type":"ARTICLE","url":"https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.4/ici/library/platform.c#L1982"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nasa-jpl/ion-dtn","events":[{"introduced":"0"},{"fixed":"d52d22bdd383798712357f86a2778757f740e812"},{"fixed":"568df887cb9f18aa8ec013b1a566d83215e499ae"}],"database_specific":{"source":"REFERENCES"}}],"versions":["ion-open-source-4.2.0-a.2","ion-open-source-4.2.0-a.1","ion-open-source-4.1.4","ion-open-source-4.1.4-b.2","ion-open-source-4.1.4-b.1","ion-open-source-4.1.4-a.2","ion-open-source-4.1.4-a.1","ion-open-source-4.1.3","ion-open-source-4.1.2","ion-open-source-4.1.1","ion-4.1.1-release","IOS-4.1.1","ion-3.6.0","ion-3.5.0","ion-3.4.0","ion-3.3.0","ion-3.2.0","ion-3.1.0","ion-3.0.0","ion-2.5.0","ion-2.4.0","ion-2.3.0","ion-2.2.1b","ion-2.2.1","ion-2.2.0","ion-2.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-84484.json","vanir_signatures_modified":"2026-09-04T14:03:38Z","vanir_signatures":[{"id":"CVE-2026-84484-0d2fa517","signature_type":"Function","signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"ici/library/ion.c","function":"_extractSmallSdnv"},"deprecated":false,"digest":{"function_hash":"248404133190925871024720012040563594466","length":604}},{"deprecated":false,"digest":{"function_hash":"300116073967617618556982858514521892109","length":3169},"id":"CVE-2026-84484-1782cb5b","signature_type":"Function","signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"dtpc/library/libdtpcP.c","function":"parseTopic"}},{"source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"ici/library/platform.c"},"deprecated":false,"digest":{"line_hashes":["50095772379432339210592441205127271","178775390500135167199319455732882026175","336983193023512963802474209779112694419"],"threshold":0.9},"id":"CVE-2026-84484-30c6a144","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"ici/library/ion.c"},"deprecated":false,"digest":{"line_hashes":["33709644875659867437612474468953724793","269614389518315163412576750802219078031","109393855149490949446341822472341970555","101397386327532176940505218475282238480","232593188294365304884739844918940427827","249742370804218607563537237174239134191","247217958142149393530216304341788631056","145921182485422260270198068828492281499","167538477849333081551359605343068044562","8974954015195745440574418861965029983","55579499643599468224058818552048979288","29061618311167544123628713836221021139","121857709836273274898028044306781772189","190855594818916309485810949995405175564","305088542602695320749524965100177511861","53640151258906541347363532273497710226","336032221646431551151784216157101599968","33958542106417221518903517465965767081","145703846573226582119920703973466999719"],"threshold":0.9},"id":"CVE-2026-84484-384699d9"},{"deprecated":false,"digest":{"line_hashes":["245324638392612078226253958533556243480","111194499035532746206739523717623993229","253238044741753690776374505858836140638","155911942141980513114716155806729017590","288296438758723082051869383540923788109","52552361863511961576803810287201568923","81093577803640967958267701673328373849","172437990172952321775000601991435630111","285245926698747207963733661940719421680","170023372023522641127647546895386698846","338655555441370959819943822524808071446","178097850406485540444432356495378778243","154331640142197299921872249009107708698","98877159753819860540263211179578186978","272093703942276070466901370368590136937","192921957860495986565883267379559311870"],"threshold":0.9},"id":"CVE-2026-84484-44bf1e29","signature_type":"Line","signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"dtpc/library/libdtpcP.c"}},{"digest":{"line_hashes":["151622091777110331723978614627586213582","156045127409004524497302227757183030440","116483294342728623553877336973849710054","30775343027633546431228838341642518314"],"threshold":0.9},"id":"CVE-2026-84484-663fb717","signature_type":"Line","signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"ici/include/platform.h"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/nasa-jpl/ion-dtn/commit/d52d22bdd383798712357f86a2778757f740e812","target":{"file":"ici/library/ion.c","function":"_extractSdnv"},"deprecated":false,"digest":{"function_hash":"244288095597613629619986812577056194056","length":432},"id":"CVE-2026-84484-7d6e7e6b","signature_type":"Function"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}