PT-2026-2132

Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software-only solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight Syste...

CVE-2025-29910

CryptoLib (NASA’s cFS SDLS-EP) contains a memory-leak vulnerability in crypto_handle_incrementing_nontransmitted_counter (crypto_tc.c) affecting version 1.3.3 and earlier. The code allocates memory with malloc without guaranteed frees, enabling resource exhaustion and degraded performance, potent...

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...