CVE-2026-85440
MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo() and negative size conversion in recv() to overflow a four-byte heap buffer during the HandShake phase before authentication.
- Published Sep 3, 2026
- CVSS 9.3 critical
- 1.0% chance of exploitation in the next 30 days (EPSS)
- A fix is available