CVE-2026-85436CWE-191

CVE-2026-85436

High · published September 4, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01192 · 65.9th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-09-04T03:17Z
References (5)
https://github.com/themoos/essential-moos · [email protected]https://github.com/themoos/essential-moos/blob/b897ea86dba8b61412dc48ac0cfb5ff34cdaf5f6/Essentials/pMOOSBridge/MOOSUDPLink.cpp#L171 · [email protected]https://github.com/themoos/essential-moos/commit/613175fcf63fb9c6c5329c4ec57c2d18588b33e2 · [email protected]https://github.com/themoos/essential-moos/pull/21 · [email protected]https://www.vulncheck.com/advisories/moos-essential-moos-through-10.0.1-pmoosbridge-heap-corruption-via-negative-udp-length · [email protected]
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 1%
    epss
  • 03 SEP 22:38Z
    MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
    cvelistv5