An issue was discovered in OpenSatKit 2.2.1.
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The program copies DirName into the local buffer DirWithSep using strcpy. The size of this buffer is OS_MAX_PATH_LEN. If the length of DirName is greater than or equal to OS_MAX_PATH_LEN, a stack buffer overflow occurs, overwriting adjacent stack memory. The path length check (FileUtil_AppendPathSep) is performed after the strcpy operation, meaning the validation occurs too late and cannot prevent the overflow.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:opensatkit:opensatkit:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Opensatkit |
- cpe:2.3:a:opensatkit:opensatkit:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Opensatkit
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-70083
- 2026-10-03 Alias added: GHSA-qwvg-xq53-3vw2
References
Advisory 1
Other 4
- https://github.com/OpenSatKit/OpenSatKit
- https://github.com/OpenSatKit/OpenSatKit/releases/tag/v2.2.1
- https://raw.githubusercontent.com/OpenSatKit/OpenSatKit/master/cfs/apps/filemgr/fsw/src/dir.c
- https://raw.githubusercontent.com/OpenSatKit/OpenSatKit/master/cfs/apps/filemgr/fsw/src/dir.c#:~:text=strcpy%28DirWithSep
More Opensatkit vulnerabilities
- TI-2025-43024 An issue was discovered in OpenSatKit 2.2.1. CVSS 3.1CRITICAL 9.8
- TI-2025-43023 Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to… CVSS 3.1HIGH 7.5
Sources
- CVE-2025-70083 · CVE Program
- CVE-2025-70083 · NVD
- FIRST EPSS
- GHSA-qwvg-xq53-3vw2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences