8 matches found
EUVD-2026-70789
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...
CVE-2026-85455
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...
CVE-2026-85455
MOOS core-moos through 10.4.0 contains a buffer over-read in the CMOOSCommPkt component. A crafted four-byte packet sent over a TCP connection to the MOOSDB port triggers an out-of-bounds memory access during deserialization, allowing an unauthenticated attacker to read process memory. The vulner...
CVE-2026-85455 MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...
CVE-2026-85455 MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...
CVE-2026-85442: Memory Allocation with Excessive Size Value
MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten, allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory an...
PT-2026-85304
Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description A buffer over-read occurs in CMOOSCommPkt during the deserialization of a four-byte packet, leading to out-of-bounds memory access. An attacker can exploit this by establishing a TCP connecti...
CVE-2026-85455: Out-of-bounds Read
MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...