CF
Product
Core Flight System
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add Core Flight System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-25373 | 9.8 | Mar 25 | The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the platform Affected: 6.7.0 |
| CVE-2026-5474 | 8.8 | Apr 3 | NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow Affected: through 7.0.0 |
| CVE-2025-25374 | 7.5 | Mar 25 | In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial… Affected: 6.7.0 |
| CVE-2025-25372 | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memory Management Module Affected: 6.7.0 |
| CVE-2025-25371 | 7.5 | Mar 25 | NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system Affected: 6.7.0 |
| CVE-2026-5473 | 7.0 | Apr 3 | NASA cFS Pickle pickle.load deserialization Affected: through 7.0.0 |
| CVE-2026-5475 | 5.5 | Apr 3 | NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption Affected: through 7.0.0 |
| CVE-2026-5476 | 4.6 | Apr 3 | NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadSize integer overflow Affected: through 7.0.0 |
Showing 8
