A buffer overflow in CMOOSUDPLink::ReadPktFromArray() permits a remote attacker to send a UDP datagram with a negative declared length. The function then performs a memcpy using that length, overwriting memory past the destination buffer. This corruption can corrupt heap data structures and ultimately crash the application, resulting in a denial of service. The flaw is a signed integer overrun (CWE‑191).

The vulnerability affects the essential‑moos component of the MOOS platform, version 10.0.1, distributed by themoos. Attackers need only send malicious UDP packets to the configured UDPListen port, which is enabled in default installations.

The CVSS score of 8.7 indicates a high severity. The EPSS score of 1% indicates a low probability of exploitation, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers can exploit the flaw remotely over the network from any host that can reach the UDP port, making the attack achievable from the internet with minimal reconnaissance.