Summary by puursuit
Malformed CBOR input could trigger an OOB read and unsigned underflow in NASA ION-DTN CBOR string decoders. The decoders checked destination capacity but not the actual remaining buffer length before copying data, which could read adjacent heap memory and propagate it through forwarded bundle metadata. The issue was fixed by validating the available buffered input before copying.