NASA CryptoLib

• CVE-2026-79954 High 8.7 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID 0.6%
• CVE-2026-22697 High 7.5 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) 0.5%
• CVE-2026-22027 Medium 5.7 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion 0.2%
• CVE-2026-22026 High 8.2 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion 0.6%
• CVE-2026-22025 Medium 6.3 CryptoLib Memory Leak on HTTP Error Response in KMC Client 0.5%
• CVE-2026-22024 Medium 6.3 CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion 0.5%
• CVE-2026-22023 High 8.2 CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern 0.6%
• CVE-2026-21900 High 8.2 CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern 0.6%
• CVE-2026-21899 Medium 4.7 CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string 0.3%
• CVE-2026-21898 High 8.2 CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity 0.4%
• CVE-2026-21897 High 7.3 CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters 0.3%
• CVE-2025-64096 High 8.8 CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check 0.5%
• CVE-2025-59534 High 7.3 CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() 0.9%
• CVE-2025-54878 High 8.6 Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` 0.4%
• CVE-2025-46675 Low 3.5 In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking. 0.4%
• CVE-2025-46673 Medium 4.9 NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS). 0.5%
• CVE-2025-46672 Low 3.5 NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking. 0.5%
• CVE-2025-46674 Low 3.5 NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle. 0.6%
• CVE-2025-30356 Critical 9.3 Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` 0.7%
• CVE-2025-30216 Critical 9.4 CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length 2.6%
• CVE-2025-29913 High 8.9 CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow 0.7%
• CVE-2025-29912 High 8.9 CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity 1.1%
• CVE-2025-29911 High 8.9 CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function 0.7%
• CVE-2025-29910 Medium 5.5 CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak 0.5%
• CVE-2025-29909 High 8.9 CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability 1.1%