Vulnerabilities

TI-2026-18224 CVE-2026-22697

Heap-based buffer overflow in nasa CryptoLib

HIGH 72

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00538 Published 2026-01-10 Fixed in 1.4.3 CWE-122

TI-2026-17721 CVE-2026-22027

CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion

MEDIUM 59

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0MEDIUM 5.7 Local High privileges No interaction EPSS 0.00243 Published 2026-01-10 Fixed in 1.4.3 CWE-122

TI-2026-17720 CVE-2026-22026

CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

HIGH 75

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00628 Published 2026-01-10 Fixed in 1.4.3 CWE-789

TI-2026-17719 CVE-2026-22025

CryptoLib Memory Leak on HTTP Error Response in KMC Client

HIGH 67

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0054 Published 2026-01-10 Fixed in 1.4.3 CWE-401

TI-2026-17718 CVE-2026-22024

CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion

HIGH 67

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00479 Published 2026-01-10 Fixed in 1.4.3 CWE-401

TI-2026-17717 CVE-2026-22023

CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern

HIGH 75

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0057 Published 2026-01-10 Fixed in 1.4.3 CWE-125

TI-2026-17600 CVE-2026-21900

CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern

HIGH 75

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00598 Published 2026-01-10 Fixed in 1.4.3 CWE-125

TI-2026-17599 CVE-2026-21899

CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string

LOW 22

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00345 Published 2026-01-10 Fixed in 1.4.3 CWE-125

TI-2026-17598 CVE-2026-21898

CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity

HIGH 75

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0045 Published 2026-01-10 Fixed in 1.4.3 CWE-125

TI-2026-17597 CVE-2026-21897

CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters

LOW 38

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00284 Published 2026-01-10 Fixed in 1.4.3 CWE-787

TI-2025-39547 CVE-2025-64096

CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check

HIGH 73

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00515 Published 2025-10-30 Fixed in 1.4.2 CWE-121

TI-2025-37064 CVE-2025-59534

CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()

LOW 38

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00913 Published 2025-09-23 Fixed in 1.4.2 CWE-78

TI-2025-34612 CVE-2025-54878

Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`

HIGH 76

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00412 Published 2025-08-11 Fixed in 1.4.1 CWE-122

TI-2025-29360 CVE-2025-46675 · GHSA-m25x-4j5x-r9v6

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.

MEDIUM 53

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.0036 Published 2025-04-27 Fixed in 1.3.2 CWE-913

TI-2025-29359 CVE-2025-46674 · GHSA-5q7p-2366-vgcc

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not…

HIGH 76

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0061 Published 2025-04-27 Fixed in 1.3.2 CWE-489

TI-2025-29358 CVE-2025-46673 · GHSA-jvpp-7888-2hgr

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state…

HIGH 76

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00507 Published 2025-04-27 Fixed in 1.3.2 CWE-913

TI-2025-29357 CVE-2025-46672 · GHSA-5c52-pcr5-2p4m

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status…

HIGH 71

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2025-04-27 Fixed in 1.3.2 CWE-252

TI-2025-21662 CVE-2025-30356

Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`

HIGH 81

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00671 Published 2025-04-01 No fix listed CWE-191

TI-2025-21552 CVE-2025-30216

CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

HIGH 82

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0265 Published 2025-03-25 No fix listed CWE-122

TI-2025-21298 CVE-2025-29913

CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow

HIGH 80

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00717 Published 2025-03-17 No fix listed CWE-125

TI-2025-21297 CVE-2025-29912

CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity

HIGH 80

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.01122 Published 2025-03-17 No fix listed CWE-122

TI-2025-21296 CVE-2025-29911

CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function

HIGH 80

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00743 Published 2025-03-17 No fix listed CWE-122

TI-2025-21295 CVE-2025-29910

CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak

MEDIUM 64

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00498 Published 2025-03-17 No fix listed CWE-401

TI-2025-21294 CVE-2025-29909

CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

HIGH 80

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a groun…

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.01084 Published 2025-03-17 No fix listed CWE-191

TI-2024-30037 CVE-2024-44912 · GHSA-42p7-pcvv-9gm5

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).

LOW 39

NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00489 Published 2024-09-27 No fix listed CWE-125

Vulnerabilities

Filters