Threat Investigation
Request a demo

CVE-2025-66216

Critical

Description

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, a heap buffer overflow vulnerability has been identified in the AIS::Message class of AIS-catcher. This vulnerability allows an attacker to write approximately 1KB of arbitrary data into a 128-byte buffer. This issue has been patched in version 0.64.

SeverityCritical
CVSS9.8
Exploit probability—
ProductAiscatcher Ais-catcher
PublishedNov 29, 2025
First seenNov 29, 2025
Weakness typeCWE-131CWE-131

How to fix

Update
  • aiscatcher ais-catcher0.64 or later

Affected products

ProductAffected versionsFixed in
aiscatcher ais-catcherv < 0.640.64

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.