PT-2025-48359 · Unknown · Ais-Catcher

Jaenact · Published 2025-11-29 · Updated 2025-12-01 · CVE-2025-66216

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AIS-catcher versions prior to 0.64

Description AIS-catcher is a multi-platform AIS receiver. A heap buffer overflow exists in the AIS::Message class. This allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. The issue allows attackers to exploit memory management errors, potentially executing arbitrary code or causing system crashes.

Recommendations Update to version 0.64 or later.

Exploit

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

CWE-131

Related Identifiers

CVE-2025-66216

GHSA-V53X-F5HH-G2G6

Affected Products

Ais-Catcher

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66216.json · Exploit
• 🔥 https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-v53x-f5hh-g2g6 · Exploit
• https://github.com/jvde-github/AIS-catcher/commit/3de0ef785fc3c96265a71b37df7b0a82cb279312 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-66216 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66216 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/1994597215495426050 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1994620880253567438 · Twitter Post
• https://twitter.com/transilienceai/status/1994610047616155668 · Twitter Post
• https://t.me/cveNotify/144411 · Telegram Post
• https://t.me/CVEtracker/38461 · Telegram Post