CVE-2025-66217

HighCVSS 7.5/10Last modified Oct 7, 2026

Description

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Length field. This leads to an immediate Denial of Service (DoS) and, when used as a library, severe Memory Corruption that can be leveraged for Remote Code Execution (RCE). This issue has been patched in version 0.64.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122 CWE-191

Affected software

Vendor	Product	Versions
jvde-github	AIS-catcher	< 0.64

References

https://github.com/jvde-github/AIS-catcher/commit/e0f7242eee659909adc11a4c561c3f7011bdefe7Patch
https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-93mj-c8q3-69rgExploit, Vendor Advisory
https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-93mj-c8q3-69rgExploit, Vendor Advisory

Timeline

Published: Nov 29, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-662199.8willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulner CVE-2025-662207.1Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher fo CVE-2025-662215.3Werkzeug is a comprehensive WSGI web application library. Prior to version 3.1.4, Werkzeug's safe_join function allows path segments with Wi CVE-2025-662229.6DeepChat is a smart assistant uses artificial intelligence. In 0.5.0 and earlier, there is a Stored Cross-Site Scripting (XSS) vulnerability CVE-2025-662238.4OpenObserve is a cloud-native observability platform. Prior to version 0.16.0, organization invitation tokens do not expire once issued, rem CVE-2025-662248.8OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application contains an input-neutralizati CVE-2025-662258.8OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the password reset workflow does not enforce t CVE-2025-66234.3The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection CVE-2025-662367.5Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay atte CVE-2025-662376.7DCIM dcTrack platforms utilize default and hard-coded credentials for access. An attacker could use these credentials to administer the data CVE-2025-662387.2DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual conso CVE-2025-66247.2Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug