A stack buffer overflow exists in INDI indiserver through version 2.2.4.2. Unauthenticated attackers can trigger the flaw by sending a single TCP packet on port 7624 containing XML tags whose names exceed 1024 bytes. The malformed tags cause an unbounded sprintf write into a fixed 1024‑byte buffer in MsgQueue.cpp, causing the daemon to crash and terminating all client and driver sessions. This results in a denial of service for any users relying on the indiserver daemon.

The vulnerability is present in the open‑source INDI indiserver component provided by the indilib:indi project, specifically in releases up to and including 2.2.4.2. The fix is incorporated in commit 96bbd7f, which is part of newer releases released after that commit.

The CVSS score of 8.7 classifies the flaw as High severity, and while a specific EPSS score is not available, the high CVSS indicates significant risk. The flaw is not listed in the CISA KEV catalog. Attackers need only send a crafted packet to port 7624; no authentication or elevated privileges are required. The attack vector uses network traffic to exploit unvalidated input, presenting an immediate threat to any exposed INDI servers.