CVE-2026-85440

Name of the Vulnerable Software and Affected Versions core-moos versions prior to 10.4.1

Description A pre-authentication heap overflow exists in MOOSCommPkt packet handling. Remote attackers can write arbitrary data by declaring a negative packet length. This is achieved by exploiting a signed integer check in the InflateTo() function and a negative size conversion in the recv() function, which leads to the overflow of a four-byte heap buffer during the HandShake phase before authentication.

Recommendations Update core-moos to version 10.4.1 or later.