CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomplete validation check on the fl (frame length) field. Although CVE-2025-29912 addressed an underflow issue involving fl, the patch fails to fully prevent unsafe calculations. As a result, an attacker can still craft malicious frames that cause a negative tf_payload_len, which is then interpreted as a large unsigned value, leading to a heap buffer overflow in a memcpy call.
References
| Link | Resource |
|---|---|
| https://github.com/nasa/CryptoLib/commit/59d1bce7608c94c6131ef4877535075b0649799c | Patch |
| https://github.com/nasa/CryptoLib/security/advisories/GHSA-6w2x-w7w3-85w2 | Exploit Vendor Advisory |
| https://github.com/nasa/CryptoLib/security/advisories/GHSA-6w2x-w7w3-85w2 | Exploit Vendor Advisory |
Configurations
History
29 Apr 2025, 14:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/nasa/CryptoLib/commit/59d1bce7608c94c6131ef4877535075b0649799c - Patch | |
| References | () https://github.com/nasa/CryptoLib/security/advisories/GHSA-6w2x-w7w3-85w2 - Exploit, Vendor Advisory | |
| CPE | cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:* | |
| First Time |
Nasa
Nasa cryptolib |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-787 |
02 Apr 2025, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-191 |
01 Apr 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-01 22:15
Updated : 2025-04-29 14:20
NVD link : CVE-2025-30356
Mitre link : CVE-2025-30356
JSON object : View
Products Affected
nasa
- cryptolib
CWE
CWE-787
Out-of-bounds Write