CVE-2026-85455

MOOS core-moos through 10.4.0 contains an out-of-bounds read (CWE-125) in the CMOOSCommPkt packet-deserialization code. An attacker who can open a TCP connection to the MOOSDB port can send a crafted four-byte packet that is processed before authentication, causing the parser to read beyond the allocated buffer. This can leak adjacent process memory to the attacker (low confidentiality impact) and, per the CVSS 4.0 vector's high availability impact, can likely crash the MOOSDB process, denying service to connected clients. Any deployment running MOOSDB from core-moos 10.4.0 or earlier whose TCP port is reachable by untrusted clients is affected, which in practice means robotics and autonomy research environments. There is no public proof of concept, no CISA KEV listing, and no known in-the-wild exploitation; EPSS estimates roughly a 0.4% probability of exploitation within 30 days.

What to do: Upgrade core-moos to a release newer than 10.4.0 once a patched version is available, and in the meantime restrict TCP access to the MOOSDB port to trusted hosts via firewall or ACL rules. Audit your environment for any MOOSDB instances reachable from untrusted networks, and monitor the vendor and CNA (VulnCheck) advisories for patched release details.