cvedb.io
CVE-2026-22023
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2026-01-10T01:16:18.410 · Last modified 2026-06-17T10:19:22.510

Summary

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, there is an out-of-bounds heap read vulnerability in cryptography_aead_encrypt(). This issue has been patched in version 1.4.3.

Affected products

nasa — cryptolib

Does this affect you?

Add your gear to cvedb and we'll alert you only when nasa ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.