CVE-2025-66217: Aiscatcher Ais-Catcher

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Length field. This leads to an immediate Denial of Service (DoS) and, when used as a library, severe Memory Corruption that can be leveraged for Remote Code Execution (RCE). This issue has been patched in version 0.64.

Affected products

• Aiscatcher Ais-Catcher: before 0.64 (fixed in 0.64)

Published 2025-11-29. Last modified 2026-10-07.