Nasa vulnerabilities

Products

• Cryptolib 28
• Fprime 15
• Cfitsio 8
• Core Flight System 8
• Cfs 7
• Ait-core 6
• Ait Core 6
• Openmct 6
• Core Flight System (cfs) Health & Safety (hs) Application 2
• Earthdata-search 2

Newest

• heasarc cfitsio CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c CVE-2026-115504 8.5 HighOctober 22, 2026
• heasarc cfitsio CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble CVE-2026-111125 6.9 MediumOctober 15, 2026
• heasarc cfitsio CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed CVE-2026-111124 6.9 MediumOctober 15, 2026
• nasa fprime F´: SendPartial Integer Overflow Leading to Assertion DoS CVE-2026-92160 6.5 MediumOctober 14, 2026
• nasa fprime F´: FileUplink Unknown Packet Type Assertion DoS CVE-2026-92155 7.5 HighOctober 14, 2026
• nasa fprime F´: GenericHub Malformed Buffer Assertion DoS CVE-2026-92150 7.5 HighOctober 14, 2026
• nasa fprime F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation CVE-2026-92154 8.1 HighOctober 14, 2026
• nasa fprime F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write CVE-2026-92158 7.2 HighOctober 14, 2026
• nasa fprime F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry CVE-2026-92159 6.5 MediumOctober 14, 2026
• nasa fprime F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge CVE-2026-92156 6.5 MediumOctober 14, 2026
• nasa fprime F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion CVE-2026-92157 6.5 MediumOctober 14, 2026
• nasa fprime F´: Unvalidated Port Index in GenericHub CVE-2026-92152 9.3 CriticalOctober 14, 2026
• nasa fprime F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath CVE-2026-92153 7.1 HighOctober 14, 2026
• nasa fprime F´: SpacePacketDeframer Small Packet Assertion DoS CVE-2026-92151 7.5 HighOctober 14, 2026
• nasa cfs NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds CVE-2026-105164 5.1 MediumOctober 4, 2026
• nasa cryptolib NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID CVE-2026-79954 8.7 HighSeptember 18, 2026
• nasa earthdata-search NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery CVE-2026-82802 6.9 MediumAugust 31, 2026
• nasa earthdata-search NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery CVE-2026-82801 6.9 MediumAugust 31, 2026
• nasa cfs NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow CVE-2026-82480 5.3 MediumAugust 30, 2026
• nasa cfs NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow CVE-2026-82479 5.3 MediumAugust 30, 2026
• nasa trick NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow CVE-2026-82478 6.9 MediumAugust 30, 2026
• nasa hypercp NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server CVE-2026-72579 7.5 HighAugust 10, 2026
• nasa fprime-gds NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection CVE-2026-72577 9.8 CriticalAugust 10, 2026
• nasa core flight system (cfs) health & safety (hs) application NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference CVE-2026-18064 8.2 HighJuly 30, 2026
• nasa-ammos ait-dsn, nasa ait dsn +1 more AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes CVE-2026-60113 9.3 CriticalJuly 29, 2026
• nasa-ammos ait-gui, nasa ait gui +1 more AIT-GUI < 2.5.1 Missing Authentication via Sessions.create() CVE-2026-60112 9.3 CriticalJuly 29, 2026
• nasa core flight system (cfs) health & safety (hs) application NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference CVE-2026-15352 8.2 HighJuly 16, 2026
• nasa openvsp NASA openVSP 3.16.1 Denial of Service via Buffer Overflow CVE-2018-25367 6.9 MediumMay 25, 2026
• nasa fprime F´ (F Prime) has Integer Overflow in FileUplink CVE-2026-41144 0.0 NoneApril 21, 2026
• nasa cfs, core flight system +1 more NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow CVE-2026-5476 2.1 LowApril 3, 2026
• nasa cfs, core flight system +1 more NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption CVE-2026-5475 5.1 MediumApril 3, 2026
• nasa cfs, core flight system +1 more NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow CVE-2026-5474 5.3 MediumApril 3, 2026
• nasa cfs, core flight system +1 more NASA cFS Pickle pickle.load deserialization CVE-2026-5473 2.0 LowApril 3, 2026
• nasa cryptolib CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) CVE-2026-22697 7.5 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion CVE-2026-22027 5.7 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion CVE-2026-22026 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Memory Leak on HTTP Error Response in KMC Client CVE-2026-22025 6.3 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion CVE-2026-22024 Public exploit 6.3 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern CVE-2026-22023 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern CVE-2026-21900 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string CVE-2026-21899 4.7 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity CVE-2026-21898 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters CVE-2026-21897 7.3 HighJanuary 10, 2026
• nasa cryptolib CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check CVE-2025-64096 8.8 HighOctober 30, 2025
• nasa cryptolib CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() CVE-2025-59534 7.3 HighSeptember 23, 2025
• nasa cryptolib Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` CVE-2025-54878 8.6 HighAugust 11, 2025
• nasa cryptolib In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to... CVE-2025-46675 3.5 LowApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended... CVE-2025-46674 3.5 LowApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use,... CVE-2025-46673 Public exploit 4.9 MediumApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially... CVE-2025-46672 3.5 LowApril 27, 2025
• Show olderLoading…