Nasa Cryptolib vulnerabilities

CVE-2025-30216 [CRITICAL] CWE-122 CVE-2025-30216: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a Heap Overflow vulnerability occurs in the `Crypto_TM_ProcessSecurity` function (`crypto

CVE-2025-64096 [HIGH] CWE-121 CVE-2025-64096: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to 1.4.2, there is a missing bounds check in Crypto_Key_update() (crypto_key_mgmt.c) which allows a remote attacker

CVE-2025-29912 [CRITICAL] CWE-122 CVE-2025-29912: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, an unsigned integer underflow in the `Crypto_TC_ProcessSecurity` function of CryptoLib le

CVE-2025-29909 [CRITICAL] CWE-191 CVE-2025-29909: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a heap buffer overflow vulnerability in CryptoLib's `Crypto_TC_ApplySecurity()` allows an

CVE-2025-29911 [CRITICAL] CWE-122 CVE-2025-29911: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A critical heap buffer overflow vulnerability was identified in the `Crypto_AOS_ProcessSecurity` function of CryptoLib

CVE-2025-29913 [CRITICAL] CWE-125 CVE-2025-29913: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A critical heap buffer overflow vulnerability was identified in the `Crypto_TC_Prep_AAD` function of CryptoLib version

CVE-2025-46673 [CRITICAL] CWE-913 CVE-2025-46673: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, pos NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).

CVE-2025-30356 [CRITICAL] CVE-2025-30356: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomple

CVE-2025-54878 [HIGH] CWE-122 CVE-2025-54878: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A heap buffer overflow vulnerability exists in NASA CryptoLib version 1.4.0 and prior in the IV setup logic for telecomman

CVE-2025-46674 [CRITICAL] CWE-489 CVE-2025-46674: NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for u NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.

CVE-2026-21897 [HIGH] CWE-787 CVE-2026-21897: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_Config_Add_Gvcid_Managed_Parameters function only checks whether gvcid_counter > GVCID_

CVE-2026-22026 [HIGH] CWE-789 CVE-2026-22026: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the libcurl write_callback function in the KMC crypto service client allows unbounded memory growt

CVE-2025-46672 [HIGH] CWE-252 CVE-2025-46672: NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially lea NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

CVE-2026-21898 [HIGH] CWE-125 CVE-2026-21898: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_AOS_ProcessSecurity function reads memory without valid bounds checking when parsing AO

CVE-2025-59534 [HIGH] CWE-78 CVE-2025-59534: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in initialize_kerberos_keytab_file_login(). The vulnerab

CVE-2026-22697 [HIGH] CWE-122 CVE-2026-22697: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is vulnerable to a heap buffer overflow when decoding B

CVE-2026-22023 [HIGH] CWE-125 CVE-2026-22023: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, there is an out-of-bounds heap read vulnerability in cryptography_aead_encrypt(). This issue has b

CVE-2025-29910 [HIGH] CWE-401 CVE-2025-29910: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Exte CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A memory leak vulnerability was identified in the `crypto_handle_incrementing_nontransmitted_counter` function of CryptoLi

CVE-2024-44910 [HIGH] CWE-125 CVE-2024-44910: NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_ NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).

CVE-2024-44911 [HIGH] CWE-125 CVE-2024-44911: NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_t NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c).