Nasa vulnerabilities
57 CVEs and advisories name Nasa as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-92160F´: SendPartial Integer Overflow Leading to Assertion DoS
- CVE-2026-92155F´: FileUplink Unknown Packet Type Assertion DoS
- CVE-2026-92150F´: GenericHub Malformed Buffer Assertion DoS
- CVE-2026-92154F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation
- CVE-2026-92158F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write
- CVE-2026-92159F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry
- CVE-2026-92156F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge
- CVE-2026-92157F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
- CVE-2026-92152F´: Unvalidated Port Index in GenericHub
- CVE-2026-92153F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath
- CVE-2026-92151F´: SpacePacketDeframer Small Packet Assertion DoS
- CVE-2026-105164NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds
- CVE-2026-79954NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
- CVE-2026-82802NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery
- CVE-2026-82801NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery
- CVE-2026-82480NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
- CVE-2026-82479NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
- CVE-2026-82478NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow
- CVE-2026-72579NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server
- CVE-2026-72577NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection
- CVE-2026-18064NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
- CVE-2026-15352NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
- CVE-2018-25367NASA openVSP 3.16.1 Denial of Service via Buffer Overflow
- CVE-2026-41144F´ (F Prime) has Integer Overflow in FileUplink
- CVE-2026-5476NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow
- CVE-2026-5475NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption
- CVE-2026-5474NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow
- CVE-2026-5473NASA cFS Pickle pickle.load deserialization
- CVE-2026-22697CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)
- CVE-2026-22027CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion