Nasa Cryptolib vulnerabilities

• nasa cryptolib NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID CVE-2026-79954 8.7 HighSeptember 18, 2026
• nasa cryptolib CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) CVE-2026-22697 7.5 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion CVE-2026-22027 5.7 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion CVE-2026-22026 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Memory Leak on HTTP Error Response in KMC Client CVE-2026-22025 6.3 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion CVE-2026-22024 Public exploit 6.3 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern CVE-2026-22023 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern CVE-2026-21900 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string CVE-2026-21899 4.7 MediumJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity CVE-2026-21898 8.2 HighJanuary 10, 2026
• nasa cryptolib CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters CVE-2026-21897 7.3 HighJanuary 10, 2026
• nasa cryptolib CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check CVE-2025-64096 8.8 HighOctober 30, 2025
• nasa cryptolib CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() CVE-2025-59534 7.3 HighSeptember 23, 2025
• nasa cryptolib Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` CVE-2025-54878 8.6 HighAugust 11, 2025
• nasa cryptolib In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to... CVE-2025-46675 3.5 LowApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended... CVE-2025-46674 3.5 LowApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use,... CVE-2025-46673 Public exploit 4.9 MediumApril 27, 2025
• nasa cryptolib NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially... CVE-2025-46672 3.5 LowApril 27, 2025
• nasa cryptolib Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` CVE-2025-30356 9.3 CriticalApril 1, 2025
• nasa cryptolib CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length CVE-2025-30216 Public exploit 9.4 CriticalMarch 25, 2025
• nasa cryptolib CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow CVE-2025-29913 8.9 HighMarch 17, 2025
• nasa cryptolib CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity CVE-2025-29912 8.9 HighMarch 17, 2025
• nasa cryptolib CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function CVE-2025-29911 8.9 HighMarch 17, 2025
• nasa cryptolib CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak CVE-2025-29910 5.5 MediumMarch 17, 2025
• nasa cryptolib CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability CVE-2025-29909 8.9 HighMarch 17, 2025
• nasa cryptolib NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem ... CVE-2024-44912 7.5 HighSeptember 27, 2024
• nasa cryptolib NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem ... CVE-2024-44911 7.5 HighSeptember 27, 2024
• nasa cryptolib NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem ... CVE-2024-44910 7.5 HighSeptember 27, 2024