CR
Product
CryptoLib
28
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 14Medium 5Low 1
Watch
Add CryptoLib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-46674 | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle Affected: before 1.3.2 |
| CVE-2025-46673 | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS) Affected: before 1.3.2 |
| CVE-2025-30356 | 9.8 | Apr 1 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.0 |
| CVE-2025-29913 | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.0 |
| CVE-2025-29912 | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.0 |
| CVE-2025-29911 | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: All versions, or not specified |
| CVE-2025-29909 | 9.8 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.0 |
| CVE-2025-30216 | 9.1 | Mar 25 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.0 |
| CVE-2025-64096 | 8.8 | Oct 30 | CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check Affected: < 1.4.2 |
| CVE-2025-46672 | 8.8 | Apr 27 | NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking Affected: before 1.3.2 |
| CVE-2026-79954 | 8.7 | Sep 18 | NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID Affected: 1.5.0 |
| CVE-2025-54878 | 8.6 | Aug 11 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.1 |
| CVE-2026-21898 | 8.2 | Jan 10 | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity Affected: < 1.4.3 |
| CVE-2025-59534 | 7.8 | Sep 23 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: before 1.4.2 |
| CVE-2026-22697 | 7.5 | Jan 10 | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) Affected: < 1.4.3 |
| CVE-2026-22026 | 7.5 | Jan 10 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion Affected: < 1.4.3 |
| CVE-2026-22023 | 7.5 | Jan 10 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern Affected: < 1.4.3 |
| CVE-2025-29910 | 7.5 | Mar 17 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running… Affected: All versions, or not specified |
| CVE-2024-44912 | 7.5 | Sep 27 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c) Affected: 1.3.0 |
| CVE-2024-44911 | 7.5 | Sep 27 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c) Affected: 1.3.0 |
| CVE-2024-44910 | 7.5 | Sep 27 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c) Affected: 1.3.0 |
| CVE-2026-21897 | 7.3 | Jan 10 | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters Affected: < 1.4.3 |
| CVE-2026-22027 | 6.0 | Jan 10 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion Affected: < 1.4.3 |
| CVE-2026-21900 | 5.9 | Jan 10 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern Affected: < 1.4.3 |
| CVE-2026-22024 | 5.3 | Jan 10 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion Affected: < 1.4.3 |
| CVE-2026-21899 | 4.9 | Jan 10 | CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string Affected: < 1.4.3 |
| CVE-2025-46675 | 4.2 | Apr 27 | In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking Affected: before 1.3.2 |
| CVE-2026-22025 | 3.7 | Jan 10 | CryptoLib Memory Leak on HTTP Error Response in KMC Client Affected: < 1.4.3 |
Showing 28