Description
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NASA | Trick | 19.6.0 | — |
References
- VDB-397028 | NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow vdb-entry technical-description
- VDB-397028 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-82478 | CVE Analysis and Report third-party-advisory
- Submit #888016 | NASA Trick 19.6.0 Buffer Overflow third-party-advisory
- https://app.notion.com/p/Stack-based-Buffer-Overflow-in-NASA-Trick-JSONVariableServer-via-Unbounded-sscanf-on-Network-Receive-39cbd773e51180e1917cd717b90b8bc8?source=copy_link related