{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aopens100opens100/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:opens100:opens100:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-35001"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenS100 (\u003c= daa35b)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpenS100"],"content_html":"\u003cp\u003eOpenS100 through commit daa35b is vulnerable to a heap-based buffer overflow stemming from an integer overflow in the S-102 Bathymetric Surface parser. The vulnerability exists within the S102_VG_BathymetryCoverage::Read() function. An attacker can exploit this by providing a specially crafted S-102 HDF5 file containing malicious grid dimension metadata. During the calculation of grid points, the multiplication of the numPointsLatitudinal and numPointsLongitudinal variables is performed without proper validation, leading to a 32-bit integer wraparound. This creates an undersized heap buffer, which the subsequent copy operation overflows. Depending on the environment, this vulnerability may result in an application crash (Denial of Service) or arbitrary code execution. This is particularly relevant for systems processing maritime bathymetric data, as the vulnerability is triggered upon the parsing of untrusted S-102 dataset files.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability in an environment processing maritime data can lead to arbitrary code execution, potentially allowing an attacker to gain control over systems utilizing the OpenS100 library. The impact is significant for maritime monitoring, hydrographic data management, or research sectors that rely on the OpenS100 framework to process S-102 standard datasets. If leveraged, an attacker could move laterally through a network, exfiltrate sensitive hydrographic data, or cause widespread service disruption via recurring application crashes.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all systems utilizing the OpenS100 library by scanning for the presence of the library in compiled binaries or dependency manifests.\u003c/li\u003e\n\u003cli\u003eRestrict the ingestion of untrusted S-102 bathymetric HDF5 files until the library is patched.\u003c/li\u003e\n\u003cli\u003eUpgrade all instances of OpenS100 to a version beyond commit daa35b or apply the vendor-provided patch addressing the integer overflow in the S102_VG_BathymetryCoverage::Read() function.\u003c/li\u003e\n\u003cli\u003eImplement memory protection mechanisms such as Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) on systems processing these files to increase the difficulty of successful exploitation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T02:32:03Z","date_published":"2026-10-13T02:32:03Z","id":"https://feed.craftedsignal.io/briefs/2026-10-opens100-integer-overflow/","summary":"An integer overflow in the OpenS100 S-102 parser allows remote attackers to trigger heap-based buffer overflows and potential arbitrary code execution via malicious HDF5 metadata.","title":"CVE-2026-35001: Integer Overflow in OpenS100 Bathymetric Parser","url":"https://feed.craftedsignal.io/briefs/2026-10-opens100-integer-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:opens100:opens100:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}