Buffer Over-read Vulnerability in MOOS Core-MOOS Affected by Out-of-bounds Memory Access

CVE-2026-85455

What is CVE-2026-85455?

The MOOS Core-MOOS library, up to version 10.4.0, contains a buffer over-read vulnerability within its CMOOSCommPkt component. This flaw permits attackers to exploit out-of-bounds memory access when a specifically crafted four-byte packet is sent during deserialization. By establishing a TCP connection to the MOOSDB port and transmitting this malicious short packet, attackers can potentially read sensitive memory content prior to any authentication process, exposing systems and data to unauthorized access.

References