CVE-2026-85440

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-85440
MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo() and negative size conversion in recv() to overflow a four-byte heap buffer during the HandShake phase before authentication.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/themoos/core-moos Product
https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Comms/MOOSCommPkt.cpp#L67 Issue Tracking Patch
https://github.com/themoos/core-moos/commit/96c49c5cdda6e07ee734a5324e8d25ba5a7f2d7a Issue Tracking Patch
https://github.com/themoos/core-moos/pull/82 Issue Tracking Patch
https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-moosdb-pre-authentication-heap-overflow-via-negative-packet-length Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:themoos:core-moos:*:*:*:*:*:*:*:*
History

14 Oct 2026, 23:29

Type Values Removed Values Added
CPE cpe:2.3:a:themoos:core-moos:*:*:*:*:*:*:*:*
References () https://github.com/themoos/core-moos - () https://github.com/themoos/core-moos - Product
References () https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Comms/MOOSCommPkt.cpp#L67 - () https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Comms/MOOSCommPkt.cpp#L67 - Issue Tracking, Patch
References () https://github.com/themoos/core-moos/commit/96c49c5cdda6e07ee734a5324e8d25ba5a7f2d7a - () https://github.com/themoos/core-moos/commit/96c49c5cdda6e07ee734a5324e8d25ba5a7f2d7a - Issue Tracking, Patch
References () https://github.com/themoos/core-moos/pull/82 - () https://github.com/themoos/core-moos/pull/82 - Issue Tracking, Patch
References () https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-moosdb-pre-authentication-heap-overflow-via-negative-packet-length - () https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-moosdb-pre-authentication-heap-overflow-via-negative-packet-length - Third Party Advisory
First Time Themoos core-moos
Themoos
Information

Published : 2026-09-03 23:17

Updated : 2026-10-14 23:29

NVD link : CVE-2026-85440

Mitre link : CVE-2026-85440

CVE.ORG link : CVE-2026-85440

JSON object : View

Products Affected

themoos

  • core-moos
CWE
CWE-787

Out-of-bounds Write