CVE-2026-85452

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-85452

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85452.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-85452

Published

2026-09-03T22:38:39Z

Modified

2026-10-21T03:00:34Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers

Details

MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the buffers when an operator selects process list entries or pokes variables, enabling code execution.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-787"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85452.json"
}

References

Affected packages

Git / github.com/themoos/ui-moos

Affected ranges

Type

GIT

Repo

https://github.com/themoos/ui-moos

Events

Introduced

Fixed

a6ebc0bc6cb360315ce620e865f996d189cddb0e

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "50b9c6c"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "range":  [
                {
                    "fixed":  "a6ebc0bc6cb360315ce620e865f996d189cddb0e"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85452.json"