CVE-2026-85454: Off-by-one Error in themoos core-moos
Description
An off-by-one buffer overflow vulnerability exists in themoos core-moos through version 10.4.0 in the CMOOSSerialPort::GetTelegram() function. This flaw causes a NUL terminator to be written one byte past the end of the serial telegram stack buffer. An attacker with control over the serial line can send a full-length telegram to trigger this off-by-one write, potentially corrupting the stack and enabling code execution.
CVSS v4.0
Score 5.2medium
Affected software
themoos
core-moos
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85454 describes a buffer overflow vulnerability in themoos core-moos versions up to 10.4.0. The vulnerability occurs in the CMOOSSerialPort::GetTelegram() function, where a NUL terminator is written one byte beyond the allocated serial telegram stack buffer. This off-by-one error can be exploited by an attacker controlling the serial line to send a carefully crafted full-length telegram, causing stack corruption and potentially allowing arbitrary code execution.
Potential Impact
Successful exploitation of this vulnerability can lead to stack corruption and potentially arbitrary code execution by an attacker who can control the serial line input. The CVSS 4.0 base score is 5.2 (medium severity), reflecting the requirement for physical or local access to the serial line (attack vector: physical) and the potential for high impact on confidentiality and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the serial line to trusted entities only to prevent exploitation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-03T19:51:02.691Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a99fa4cacd9273b4994b286
Added to database: 09/03/2026, 22:53:00 UTC
Last enriched: 09/15/2026, 01:08:32 UTC
Last updated: 10/17/2026, 18:48:23 UTC
Views: 72
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.