CVE-2026-22697

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, CryptoLib’s KMC crypto service integration is vulnerable to a heap buffer overflow when decoding Base64-encoded ciphertext/cleartext fields returned by the KMC service. The decode destination buffer is sized using an expected output length (len_data_out), but the Base64 decoder writes output based on the actual Base64 input length and does not enforce any destination size limit. An oversized Base64 string in the KMC JSON response can cause out-of-bounds writes on the heap, resulting in process crash and potentially code execution under certain conditions. This issue has been patched in version 1.4.3.

• CWE-122

• https://github.com/nasa/CryptoLib/releases/tag/v1.4.3Release Notes
• https://github.com/nasa/CryptoLib/security/advisories/GHSA-qjx3-83jh-2jc4Exploit, Vendor Advisory
• https://github.com/nasa/CryptoLib/security/advisories/GHSA-qjx3-83jh-2jc4Exploit, Vendor Advisory

Published

Jan 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22691pypdf is a free and open-source pure-python PDF library. Pri…5.3
• CVE-2026-22692October is a Content Management System (CMS) and web platfor…6.8
• CVE-2026-22693HarfBuzz is a text shaping engine. Prior to version 12.3.0, …5.3
• CVE-2026-22694AliasVault is a privacy-first password manager with built-in…6.1
• CVE-2026-22695LIBPNG is a reference library for use in applications that r…7.1
• CVE-2026-22696dcap-qvl implements the quote verification logic for DCAP (D…9.3
• CVE-2026-22698RustCrypto: Elliptic Curves is general purpose Elliptic Curv…7.5
• CVE-2026-22699RustCrypto: Elliptic Curves is general purpose Elliptic Curv…7.5
• CVE-2026-22700RustCrypto: Elliptic Curves is general purpose Elliptic Curv…7.5
• CVE-2026-22701filelock is a platform-independent file lock for Python. Pri…5.3
• CVE-2026-22702virtualenv is a tool for creating isolated virtual python en…4.5
• CVE-2026-22703Cosign provides code signing and transparency for containers…5.5