CVE-2025-66216

CRITICAL9.3

AIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCE

Published Nov 29, 2025

Modified 3 months ago

Details

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been patched in version 0.64.

References

WEB

https://github.com/jvde-github/AIS-catcher/commit/3de0ef785fc3c96265a71b37df7b0a82cb279312

DETECTION

https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-v53x-f5hh-g2g6

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-66216

CVSS Analysis

CVSS v4.0

9.3

Exploitability

Attack Vector