CVE-2026-85436

Received Received - Intake

Heap Overflow in MOOS essential-moos via UDP

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-85436

Affected Vendors & Products

Vendor	Product	Version / Range
moos	essential-moos	From 10.0.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in MOOS essential-moos through version 10.0.1. It occurs in the CMOOSUDPLink::ReadPktFromArray() function when processing UDP datagrams with negative declared lengths. Attackers exploit this by sending crafted UDP packets to the configured UDPListen port, triggering an oversized memcpy that corrupts heap memory and causes denial of service.

Detection Guidance

Monitor network traffic for UDP packets sent to the configured UDPListen port of MOOS essential-moos. Look for packets with negative declared lengths or unusually large payloads. Use packet inspection tools like tcpdump or Wireshark to capture and analyze UDP traffic targeting the service.

Impact Analysis

This vulnerability allows remote attackers to crash the MOOS essential-moos application by sending specially crafted UDP packets. The impact includes service disruption due to heap corruption and potential denial of service if the application becomes unresponsive.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling denial of service attacks that disrupt system availability. GDPR requires maintaining data processing systems securely, and HIPAA mandates availability of protected health information systems. The heap corruption and denial of service caused by this flaw may violate these requirements.

Mitigation Strategies

Immediately update MOOS essential-moos to the latest version beyond 10.0.1. If an update is unavailable, restrict network access to the UDPListen port using firewalls or network segmentation. Disable UDP support if not required. Monitor for signs of exploitation or service instability.

Hi! I’m here to help you understand CVE-2026-85436. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70