CVE-2025-70085: Stack-based Buffer Overflow

An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames Source1Filename and the string returned by FileUtilFileStateStr into this buffer without any length checking and without using bounded format specifiers...

CVE-2025-70085

A stack buffer overflow exists in OpenSatKit version 2.2.1 due to the use of unsafe sprintf calls within the file.c file. Specifically, the EventErrStr buffer is fixed at 256 bytes, but the application fails to perform length checking when formatting two filenames (Source1Filename and the string ...