PT-2025-48359 · Unknown · Ais-Catcher

Published 2025-11-29 · Updated 2025-11-29 · CVE-2025-66216

Positive Technologies · (AI Summary)

CVSS v4.0

9.3

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AIS-catcher versions prior to 0.64

Description AIS-catcher is a multi-platform AIS receiver. A heap buffer overflow exists in the

AIS::Message

class. This allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. The issue allows attackers to exploit memory management errors, potentially executing arbitrary code or causing system crashes.

Recommendations Update to version 0.64 or later.

Fix

DoS

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2025-66216

GHSA-V53X-F5HH-G2G6

Affected Products

Ais-Catcher

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-66216 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66216 · Vendor Advisory
• https://github.com/jvde-github/AIS-catcher/commit/3de0ef785fc3c96265a71b37df7b0a82cb279312 · Note
• https://github.com/jvde-github/AIS-catcher/security/advisories/GHSA-v53x-f5hh-g2g6 · Note
• https://twitter.com/VulmonFeeds/status/1994620880253567438 · Twitter Post
• https://t.me/CVEtracker/38461 · Telegram Post
• https://twitter.com/transilienceai/status/1994610047616155668 · Twitter Post
• https://twitter.com/0dayPublishing/status/1994597215495426050 · Twitter Post