Priority MEDIUM 64
CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_nnybble in fits_hdecompress.c.
Vulnerabilities
87 records
Priority MEDIUM 64
CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 se…
Priority LOW 29
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority LOW 39
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority HIGH 72
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority HIGH 70
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority HIGH 67
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority MEDIUM 62
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority MEDIUM 62
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
TI-2026-74395 CVE-2026-92157
F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
Priority MEDIUM 62
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority MEDIUM 49
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority LOW 32
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
Priority HIGH 72
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.
TI-2026-67670 CVE-2026-105164 · GHSA-v57f-4hqc-phxq
Out-of-bounds read in NASA cFS file name parsing
Priority LOW 23
A flaw has been found in NASA cFS up to 7.0.1.
TI-2026-55304 CVE-2026-79954 · GHSA-64r5-qp28-crvm
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
Priority MEDIUM 44
NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path.
TI-2026-57117 CVE-2026-82802 · GHSA-f5ch-73j8-9vvx
NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery
Priority HIGH 70
A flaw has been found in NASA earthdata-search 1.0.0.
TI-2026-57116 CVE-2026-82801 · GHSA-x7vq-m9h7-j2wv
NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery
Priority HIGH 70
A vulnerability was detected in NASA earthdata-search 1.0.0.
TI-2026-56873 CVE-2026-82480 · GHSA-h35r-6hg6-mcg3
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
Priority MEDIUM 57
A security flaw has been discovered in NASA cFS up to 7.0.1.
TI-2026-56872 CVE-2026-82479 · GHSA-6cv3-j4mc-jf2r
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
Priority MEDIUM 57
A vulnerability was identified in NASA cFS up to 7.0.1.
TI-2026-56871 CVE-2026-82478 · GHSA-fq2p-334f-fcrf
NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow
Priority LOW 37
A vulnerability was determined in NASA Trick 19.6.0.
TI-2026-50837 CVE-2026-72579 · GHSA-x6m6-xccc-227g
NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server
Priority LOW 37
An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the res…
TI-2026-50835 CVE-2026-72577 · GHSA-p6w2-c4j5-7xhm
NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
Priority MEDIUM 51
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft.
TI-2026-14873 CVE-2026-18064 · GHSA-cwcv-w3jg-jv76
NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
Priority MEDIUM 43
An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1.
Priority HIGH 81
AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE) interface manager that allows unauthenticated network attac…
TI-2026-42832 CVE-2026-60112 · GHSA-3j6g-pxmx-58qg
AIT-GUI < 2.5.1 Missing Authentication via Sessions.create()
Priority MEDIUM 49
AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by callin…