CVE-2026-85436 MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2026-85436

MOOS essential-moos through version 10.0.1 is affected by a buffer overflow in CMOOSUDPLink::ReadPktFromArray() within the pMOOSBridge component. The root cause is that negative declared lengths in received UDP datagrams trigger an oversized memcpy operation, writing past the destination buffer a...