CVE-2026-85442: MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allowing unauthenticated attackers to trigger unbounded buffer allocation by sending crafted wire packets. Attackers can send packets with large declared lengths to exhaust server memory and cause denial of service before client authentication completes.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
MOOS core-moos and MOOSDB deployments running versions through 10.4.0 are affected if an attacker can reach the service over the network. The attack occurs before client authentication, so the attacker does not need valid credentials.
What does an attacker need to do to cause service disruption?
An attacker only needs to send crafted wire packets with excessively large declared packet lengths. This can cause unbounded buffer allocation, exhaust server memory, and deny service.
Does authentication or user interaction prevent exploitation?
No. Exploitation is unauthenticated and requires no user interaction because the vulnerable packet handling occurs before client authentication completes.