CyberRota Analysis
AI-GeneratedA pre-authentication heap overflow vulnerability in MOOS core-moos versions up to 10.4.0 allows remote attackers to exploit the handling of MOOSCommPkt packets by declaring a negative packet length, leading to arbitrary data write. This critical flaw can be exploited during the HandShake phase before authentication, potentially compromising system integrity and confidentiality. Organizations using affected versions should prioritize immediate patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo() and negative size conversion in recv() to overflow a four-byte heap buffer during the HandShake phase before authentication.