CVE-2025-66216

CVE-2025-66216 describes a critical heap buffer overflow vulnerability in AIS-catcher versions prior to 0.64, specifically within the AIS::Message class. This flaw allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer, affecting the aiscatcher and ais_catcher products. The vulnerability carries a CVSS score of 9.8 (Critical), indicating it is remotely exploitable without authentication and can lead to high impact on confidentiality, integrity, and availability, including potential remote code execution and Denial of Service. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, with one mention highlighting its critical nature and the need to upgrade to version 0.64 or later.