CVE-2026-85436

HIGH 7.5

MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.

CWE	CWE-191
Vendor	themoos
Product	essential-moos
Published	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for themoos essential-moos

Be the first to know when new high vulnerabilities affecting themoos essential-moos are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

themoos / essential-moos

0 ≤ 10.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/themoos/essential-moos/pull/21 github.com: https://github.com/themoos/essential-moos/commit/613175fcf63fb9c6c5329c4ec57c2d18588b33e2 github.com: https://github.com/themoos/essential-moos github.com: https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pMOOSBridge/MOOSUDPLink.cpp#L171 vulncheck.com: https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pmoosbridge-heap-corruption-via-negative-udp-length

Credits

Vlatko Kosturjak