CVE-2026-85436

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85436

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85436.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85436

Published

2026-09-03T22:38:28.519Z

Modified

2026-09-06T03:47:06.218796701Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

Details

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.

Database specific

{
    "cwe_ids": [
        "CWE-191"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85436.json"
}

References

Affected packages

Git / github.com/themoos/essential-moos

Affected ranges

Type

GIT

Repo

https://github.com/themoos/essential-moos

Events

Introduced

Fixed

07a2f194fe9cc0e6a208e687989c5e26e3d7343a

Fixed

613175fcf63fb9c6c5329c4ec57c2d18588b33e2

Database specific

Show details

{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "10.0.1"
        }
    ]
}

Affected versions

10.*

10.0.0-release

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85436.json"