A buffer overflow in ScopeTabPane.cpp and ScopeGrid.cpp occurs because the UI formats client and variable names into 1024‑byte buffers with sprintf without bounds checking. When an operator selects an entry or pokes a variable, extremely long MOOS identifiers can overflow the buffer, corrupting control data and allowing arbitrary code execution on the machine that runs the UI, violating confidentiality, integrity, and availability. This weakness is an instance of CWE‑787.

The vulnerability affects the MOOS ui‑moos application from themoos prior to commit 50b9c6c. Any distribution or release built from code earlier than that commit is vulnerable, as the flaw resides in the ScopeTabPane.cpp and ScopeGrid.cpp files.

The CVSS score of 8.7 indicates high severity, yet no EPSS data is available and the flaw is not yet listed in the CISA KEV catalog. Attackers need the ability to interact with the ui‑moos front‑end – either remotely via a networked UI or locally where an operator can select entries. Once the buffer overflow is triggered an adversary can inject and execute arbitrary code. Because the UI does not perform input validation, the attack vector is likely local or remote if the UI is exposed externally.