VULNERABILITY INTELLIGENCE

CVE-2026-85445

CVSS score7.5 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resources and causing service unavailability.

Weakness classification

  • disclosure@vulncheck.com: CWE-789

Primary references