CVE-2025-29912

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, an unsigned integer underflow in the `Crypto_TC_ProcessSecurity` function of CryptoLib leads to a heap buffer overflow. The vulnerability is triggered when the `fl` (frame length) field in a Telecommand (TC) packet is set to 0. This underflow causes the frame length to be interpreted as 65535, resulting in out-of-bounds memory access. This critical vulnerability can be exploited to cause a denial of service (DoS) or potentially achieve remote code execution. Users of CryptoLib are advised to apply the recommended patch or avoid processing untrusted TC packets until a fix is available.

• CWE-122
• CWE-191
• CWE-787

• https://github.com/nasa/CryptoLib/commit/ca39cb96f21e76102aefb956d2c8c0ba0bd143caPatch
• https://github.com/nasa/CryptoLib/security/advisories/GHSA-3f5x-r59x-p8cfExploit, Vendor Advisory

Published

Mar 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-29907jsPDF is a library to generate PDFs in JavaScript. Prior to …7.5
• CVE-2025-29908Netty QUIC codec is a QUIC codec for netty which makes use o…5.3
• CVE-2025-29909CryptoLib provides a software-only solution using the CCSDS …9.8
• CVE-2025-2991A vulnerability classified as critical has been found in Ten…6.9
• CVE-2025-29910CryptoLib provides a software-only solution using the CCSDS …7.5
• CVE-2025-29911CryptoLib provides a software-only solution using the CCSDS …9.8
• CVE-2025-29913CryptoLib provides a software-only solution using the CCSDS …9.8
• CVE-2025-29914OWASP Coraza WAF is a golang modsecurity compatible web appl…5.4
• CVE-2025-29915Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2025-29916Suricata is a network Intrusion Detection System, Intrusion …5.5
• CVE-2025-29917Suricata is a network Intrusion Detection System, Intrusion …5.5
• CVE-2025-29918Suricata is a network Intrusion Detection System, Intrusion …5.5