# cve.now: Nasa

The newest entries naming Nasa as an affected vendor (up to 200), of 57 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-92160](https://cve.now/CVE-2026-92160.md): F´: SendPartial Integer Overflow Leading to Assertion DoS (CVSS 6.5)
- [CVE-2026-92155](https://cve.now/CVE-2026-92155.md): F´: FileUplink Unknown Packet Type Assertion DoS (CVSS 7.5)
- [CVE-2026-92150](https://cve.now/CVE-2026-92150.md): F´: GenericHub Malformed Buffer Assertion DoS (CVSS 7.5)
- [CVE-2026-92154](https://cve.now/CVE-2026-92154.md): F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation (CVSS 8.1)
- [CVE-2026-92158](https://cve.now/CVE-2026-92158.md): F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write (CVSS 7.2)
- [CVE-2026-92159](https://cve.now/CVE-2026-92159.md): F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry (CVSS 6.5)
- [CVE-2026-92156](https://cve.now/CVE-2026-92156.md): F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge (CVSS 6.5)
- [CVE-2026-92157](https://cve.now/CVE-2026-92157.md): F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion (CVSS 6.5)
- [CVE-2026-92152](https://cve.now/CVE-2026-92152.md): F´: Unvalidated Port Index in GenericHub (CVSS 9.3)
- [CVE-2026-92153](https://cve.now/CVE-2026-92153.md): F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath (CVSS 7.1)
- [CVE-2026-92151](https://cve.now/CVE-2026-92151.md): F´: SpacePacketDeframer Small Packet Assertion DoS (CVSS 7.5)
- [CVE-2026-105164](https://cve.now/CVE-2026-105164.md): NASA cFS cfe\_fs\_api.c CFE\_FS\_ParseInputFileNameEx out-of-bounds (CVSS 5.1)
- [CVE-2026-79954](https://cve.now/CVE-2026-79954.md): NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID (CVSS 8.7)
- [CVE-2026-82802](https://cve.now/CVE-2026-82802.md): NASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgery (CVSS 6.9)
- [CVE-2026-82801](https://cve.now/CVE-2026-82801.md): NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery (CVSS 6.9)
- [CVE-2026-82480](https://cve.now/CVE-2026-82480.md): NASA cFS cFE Software Bus cfe\_sb\_util.c CFE\_SB\_GetUserDataLength integer underflow (CVSS 5.3)
- [CVE-2026-82479](https://cve.now/CVE-2026-82479.md): NASA cFS SBN TCP sbn\_tcp\_if.c OS\_read buffer overflow (CVSS 5.3)
- [CVE-2026-82478](https://cve.now/CVE-2026-82478.md): NASA Trick TCP Socket JSONVariableServerThread.cpp parse\_request stack-based overflow (CVSS 6.9)
- [CVE-2026-72579](https://cve.now/CVE-2026-72579.md): NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server (CVSS 7.5)
- [CVE-2026-72577](https://cve.now/CVE-2026-72577.md): NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection (CVSS 9.8)
- [CVE-2026-18064](https://cve.now/CVE-2026-18064.md): NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference (CVSS 7.5)
- [CVE-2026-15352](https://cve.now/CVE-2026-15352.md): NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference (CVSS 7.5)
- [CVE-2018-25367](https://cve.now/CVE-2018-25367.md): NASA openVSP 3.16.1 Denial of Service via Buffer Overflow (CVSS 6.9)
- [CVE-2026-41144](https://cve.now/CVE-2026-41144.md): F´ (F Prime) has Integer Overflow in FileUplink (CVSS 0.0)
- [CVE-2026-5476](https://cve.now/CVE-2026-5476.md): NASA cFS cfe\_tbl\_passthru\_codec.c CFE\_TBL\_ValidateCodecLoadSize integer overflow (CVSS 2.1)
- [CVE-2026-5475](https://cve.now/CVE-2026-5475.md): NASA cFS CCSDS Header Size cfe\_sb\_priv.c CFE\_SB\_TransmitMsg memory corruption (CVSS 5.1)
- [CVE-2026-5474](https://cve.now/CVE-2026-5474.md): NASA cFS CCSDS Packet Header to\_lab\_passthru\_encode.c CFE\_MSG\_GetSize heap-based overflow (CVSS 5.3)
- [CVE-2026-5473](https://cve.now/CVE-2026-5473.md): NASA cFS Pickle pickle.load deserialization (CVSS 2.0)
- [CVE-2026-22697](https://cve.now/CVE-2026-22697.md): CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) (CVSS 7.5)
- [CVE-2026-22027](https://cve.now/CVE-2026-22027.md): CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion (CVSS 5.7)
- [CVE-2026-22026](https://cve.now/CVE-2026-22026.md): CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion (CVSS 8.2)
- [CVE-2026-22025](https://cve.now/CVE-2026-22025.md): CryptoLib Memory Leak on HTTP Error Response in KMC Client (CVSS 6.3)
- [CVE-2026-22024](https://cve.now/CVE-2026-22024.md): CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion (CVSS 6.3)
- [CVE-2026-22023](https://cve.now/CVE-2026-22023.md): CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern (CVSS 8.2)
- [CVE-2026-21900](https://cve.now/CVE-2026-21900.md): CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern (CVSS 8.2)
- [CVE-2026-21899](https://cve.now/CVE-2026-21899.md): CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string (CVSS 4.7)
- [CVE-2026-21898](https://cve.now/CVE-2026-21898.md): CryptoLib Has Out-of-bounds Read in Crypto\_AOS\_ProcessSecurity (CVSS 8.2)
- [CVE-2026-21897](https://cve.now/CVE-2026-21897.md): CryptoLib Has Out-of-Bounds Write in Crypto\_Config\_Add\_Gvcid\_Managed\_Parameters (CVSS 7.3)
- [CVE-2025-64096](https://cve.now/CVE-2025-64096.md): CryptoLib vulnerable to Stack Buffer Overflow in Crypto\_Key\_Update due to missing TLV length check (CVSS 8.8)
- [CVE-2025-59534](https://cve.now/CVE-2025-59534.md): CryptoLib command Injection vulnerability in initialize\_kerberos\_keytab\_file\_login() (CVSS 7.3)
- [CVE-2025-54878](https://cve.now/CVE-2025-54878.md): Heap Buffer Overflow in NASA CryptoLib 1.4.0 \`Crypto\_TC\_Check\_IV\_Setup\` (CVSS 8.6)
- [CVE-2025-46675](https://cve.now/CVE-2025-46675.md): In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking. (CVSS 3.5)
- [CVE-2025-46674](https://cve.now/CVE-2025-46674.md): NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading t (CVSS 3.5)
- [CVE-2025-46673](https://cve.now/CVE-2025-46673.md): NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space… (CVSS 4.9)
- [CVE-2025-46672](https://cve.now/CVE-2025-46672.md): NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking. (CVSS 3.5)
- [CVE-2025-30356](https://cve.now/CVE-2025-30356.md): Heap Buffer Overflow via Incomplete Length Check in \`Crypto\_TC\_ApplySecurity\` (CVSS 9.3)
- [CVE-2025-30216](https://cve.now/CVE-2025-30216.md): CryptoLib Has Heap Overflow in Crypto\_TM\_ProcessSecurity due to Unchecked Secondary Header Length (CVSS 9.4)
- [CVE-2025-29913](https://cve.now/CVE-2025-29913.md): CryptoLib's Crypto\_TC\_Prep\_AAD Has Buffer Overflow Due to Integer Underflow (CVSS 8.9)
- [CVE-2025-29912](https://cve.now/CVE-2025-29912.md): CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto\_TC\_ProcessSecurity (CVSS 8.9)
- [CVE-2025-29911](https://cve.now/CVE-2025-29911.md): CryptoLib Has Heap Buffer Overflow in Crypto\_AOS\_ProcessSecurity Function (CVSS 8.9)
- [CVE-2025-29910](https://cve.now/CVE-2025-29910.md): CryptoLib's crypto\_handle\_incrementing\_nontransmitted\_counter Function has Memory Leak (CVSS 5.5)
- [CVE-2025-29909](https://cve.now/CVE-2025-29909.md): CryptoLib's Crypto\_TC\_ApplySecurity() Has a Heap Buffer Overflow Vulnerability (CVSS 8.9)
- [CVE-2022-23054](https://cve.now/CVE-2022-23054.md): Openmct XSS via the “Summary Widget” (CVSS 6.1)
- [CVE-2022-23053](https://cve.now/CVE-2022-23053.md): Openmct XSS via the “Condition Widget” (CVSS 6.1)
- [CVE-2022-22126](https://cve.now/CVE-2022-22126.md): Openmct XSS via the “Web Page” element (CVSS 6.1)
- [CVE-2019-1010060](https://cve.now/CVE-2019-1010060.md): NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. (no CVSS)
- [CVE-2018-3847](https://cve.now/CVE-2018-3847.md): Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42. (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/nasa
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.