EUVD-2026-92130

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

CVE-2026-105164

A flaw in NASA cFS versions up to 7.0.1 allows for an out-of-bounds read via the CFE_FS_ParseInputFileNameEx function located in cfe/modules/fs/fsw/src/cfe_fs_api.c. This vulnerability can be triggered through remote exploitation . While a pull request to address the issue exists, the documents i...

CVE-2026-105164 NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFEFSParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfefsapi.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance...

PT-2026-104650

A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE FS ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe fs api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits...

CVE-2025-30216-PoC

PoC for CVE-2025-30216: CryptoLib Heap Overflow Vulnerability Overview CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station...

CVE-2026-82480

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82479

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

CVE-2026-82480

A remote integer underflow vulnerability exists in the cFE Software Bus component of NASA cFS (up to version 7.0.1), specifically in the function CFE_SB_GetUserDataLength within the file cfe_sb_util.c. Manipulating the TotalMsgSize/HdrSize argument triggers the underflow. The attack requires low ...

CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

EUVD-2026-68151

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

CVE-2026-82479

NASA cFS (core Flight System) up to version 7.0.1 contains a buffer overflow in the SBN TCP Module . The vulnerable function is OS_read in the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c , where manipulation of the MsgSz argument leads to the overflow. The attack must be conducted from within ...

CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

EUVD-2026-68150

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

CVE-2026-82479: Buffer Copy without Checking Size of Input

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

PT-2026-83521

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS read of the file modules/protocol/tcp/fsw/src/sbn tcp if.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...

PT-2026-83522

Name of the Vulnerable Software and Affected Versions NASA cFS versions prior to 7.0.2 Description A security flaw exists in the cFE Software Bus component within the CFE SB GetUserDataLength function located in the src/cFS/cfe/modules/sb/fsw/src/cfe sb util.c file. A remote attacker can trigger ...

CVE-2026-82480: Integer Underflow (Wrap or Wraparound)

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFESBGetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfesbutil.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...