Nasa vulnerabilities
57 CVEs and advisories name Nasa as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-22026CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
- CVE-2026-22025CryptoLib Memory Leak on HTTP Error Response in KMC Client
- CVE-2026-22024CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion
- CVE-2026-22023CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern
- CVE-2026-21900CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern
- CVE-2026-21899CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string
- CVE-2026-21898CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity
- CVE-2026-21897CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters
- CVE-2025-64096CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check
- CVE-2025-59534CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()
- CVE-2025-54878Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`
- CVE-2025-46675In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.
- CVE-2025-46674NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading t
- CVE-2025-46673NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space…
- CVE-2025-46672NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.
- CVE-2025-30356Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`
- CVE-2025-30216CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length
- CVE-2025-29913CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow
- CVE-2025-29912CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity
- CVE-2025-29911CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function
- CVE-2025-29910CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak
- CVE-2025-29909CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability
- CVE-2022-23054Openmct XSS via the “Summary Widget”
- CVE-2022-23053Openmct XSS via the “Condition Widget”
- CVE-2022-22126Openmct XSS via the “Web Page” element
- CVE-2019-1010060NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow.
- CVE-2018-3847Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library version 3.42.