22 matches found
CVE-2026-67972
An issue in the CFCFDPRecvMd component of NASA cFS v7.0.1 allows attackers to contrl where received content and data is stored, possibly leading to an information disclosure...
CVE-2026-67975
NASA cFS v7.0.1 is affected by an incorrect access control vulnerability. This flaw allows an attacker to arbitrarily remove low-index subscriptions and add new streams by sending TO_LAB add/remove subscription commands. Exploitation details and specific remediation steps are not provided in the ...
CVE-2026-18064
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
CVE-2026-18064: NULL Pointer Dereference
An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...
CVE-2026-15352: NULL Pointer Dereference
A vulnerability exists in the Health & Safety HS application of NASA's Core Flight System cFS. The flaw allows the application to crash via segmentation fault when processing a routine Housekeeping Telemetry request, leading to denial of service...
CVE-2026-5474
A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFEMSGGetSize of the file apps/tolab/fsw/src/tolabpassthruencode.c of the component CCSDS Packet Header Handler. Performing a manipulation results in heap-based buffer overflow. The attacker must have access to the local...
CVE-2026-5474 NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow
A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFEMSGGetSize of the file apps/tolab/fsw/src/tolabpassthruencode.c of the component CCSDS Packet Header Handler. Performing a manipulation results in heap-based buffer overflow. The attacker must have access to the local...
EUVD-2025-8090
Malicious code in bioql PyPI...
EUVD-2025-8098
Malicious code in bioql PyPI...
EUVD-2025-8103
Malicious code in bioql PyPI...
EUVD-2025-8100
Malicious code in bioql PyPI...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2025-25373
The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain an RCE on the platform...
CVE-2025-25373
The NASA cFS (Core Flight System) Aquila software is affected by a vulnerability in its Memory Management Module due to insecure permissions (CWE-732). This flaw can be exploited to achieve remote code execution (RCE) on the platform. While a proof-of-concept has been published, no specific patch...
CVE-2025-25374
The NASA cFS (Core Flight System) Aquila is vulnerable to an uncontrolled resource consumption issue (CWE-400) that can put the onboard software into a state preventing the launch of any external application. This results in a platform denial of service . While the specific affected versions are ...
PT-2025-12829
Name of the Vulnerable Software and Affected Versions NASA cFS Core Flight System Aquila affected versions not specified Description The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain remote code execution RCE on the platfor...
