High severity · published Aug 30, 2026
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
7.4
CVSS
0.4%
EPSS
No
On KEV
Description
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfe_sb_util.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer underflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
cFS · NASA
7.0.0; 7.0.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82480
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82480
vuldb.com
https://vuldb.com/cve/CVE-2026-82480
vuldb.com
https://vuldb.com/submit/888018
vuldb.com
https://vuldb.com/vuln/397030
vuldb.com
https://vuldb.com/vuln/397030/cti
More from cFS
8.8
CVE-2026-5474
NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow
7.0
CVE-2026-5473
NASA cFS Pickle pickle.load deserialization
6.3
CVE-2026-82479
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
5.5
CVE-2026-5475
NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption
4.6
CVE-2026-5476
NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow