NASA JPL ION‑DTN versions 2.2.1b through 4.2.0 contain an integer overflow in the Datagram Retransmission (DGR) convergence layer. A crafted 64‑bit svcDataLength field can wrap a 32‑bit allocation size calculation, allowing an attacker to perform an out‑of‑bounds memcpy via the dgr_receive API. The resulting heap corruption can lead to denial of service or, if exploited further, remote code execution on the host running ION‑DTN.

The vulnerable component is the ION‑DTN software from NASA JPL. Affected releases include versions 2.2.1b through 4.2.0. No specific service or operating system limitations are listed, but the vulnerability arises in the DGR convergence layer accessed over internal IPC or custom transports.

The CVSS score of 9.2 reflects a high severity with potential for remote exploitation. EPSS data is not currently available, so the probability cannot be quantified, yet the vulnerability is not listed in the CISA KEV catalog. Attackers would need to send specially crafted datagrams or DGR traffic to the target, implying that exposure of the dgr_receive API to untrusted sources creates the attack surface.