Skip to content
OpenAdvisories

Vendor

nasa

57 known vulnerabilities.

Products

CryptoLib 25 fprime 12 cFS 7 openmct 3 Core Flight System (cFS) Health & Safety (HS) Application 2 CFITSIO 2 earthdata-search 2 HyperCP 1 Trick 1 fprime-gds 1 openVSP 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-92152

    F´: Unvalidated Port Index in GenericHub

    F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dispatch is vulnerable because the deserialized port field is passed to serialOut_…

    nasa fprime
  • Critical 9.8
    CVE-2026-72577

    NASA fprime-gds - Missing Authentication and Path Traversal Enable Unauthenticated RCE and Spacecraft Command Injection

    Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime_gds/fl…

    nasa fprime-gds
  • Critical 9.3
    CVE-2025-30356

    Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`

    CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap…

    nasa CryptoLib
  • Critical 9.4
    CVE-2025-30216 Public exploit

    CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

    CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior,…

    nasa CryptoLib