cvedb.io
CVE-2026-21898
HIGH · CVSS 8.2
EPSS exploitation probability: 0%
Published 2026-01-10T01:16:17.957 · Last modified 2026-06-17T10:19:06.793

Summary

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_AOS_ProcessSecurity function reads memory without valid bounds checking when parsing AOS frame hashes. This issue has been patched in version 1.4.3.

Affected products

nasa — cryptolib

Does this affect you?

Add your gear to cvedb and we'll alert you only when nasa ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.