CVE-2026-85442
MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory and cause denial of service before client authentication completes.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.41%
- CWE
- CWE-789
- Published
- 2026-09-03
- Last modified
- 2026-09-04
Affected products
- themoos core-moos
Weakness type
Related vulnerabilities
- CVE-2026-83530 — Uncontrolled Memory Allocation in cel-go
- CVE-2026-86776 — KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size
- CVE-2026-19204 — A client may send a WebSocket frame with an unknown opcode and a very large declared payload...
- CVE-2026-85201 — In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a...
- CVE-2026-85445 — MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
- CVE-2026-84888 — RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation
- CVE-2026-84857 — sigoden aichat API Endpoint serve.rs memory allocation
- CVE-2026-84289 — NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation