一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月5日

CVE-2026-85436 [HIGH] – MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLin

未分类
📑 文章目录

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to trigger an oversized memcpy operation that writes past the destination buffer, causing heap corruption and denial of service.