CVE-2025-64096 Details
Description
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to 1.4.2, there is a missing bounds check in Crypto_Key_update() (crypto_key_mgmt.c) which allows a remote attacker to trigger a stack-based buffer overflow by supplying a TLV packet with a spoofed length field. The function calculates the number of keys from an attacker-controlled field (pdu_len), which may exceed the static array size (kblk[98]), leading to an out-of-bounds write and potential memory corruption. This vulnerability is fixed in 1.4.2.
A stack-based buffer overflow vulnerability has been identified in CryptoLib versions prior to 1.4.2. The issue arises from a missing bounds check in the Crypto_Key_update() function within crypto_key_mgmt.c. This vulnerability allows remote attackers to exploit the Extended Procedures of the CCSDS Space Data Link Security Protocol by sending a TLV packet with a manipulated length field. The function improperly calculates the number of keys based on the spoofed length, potentially exceeding the size of a static array, leading to out-of-bounds writes and memory corruption.
Users are advised to update CryptoLib to version 1.4.2, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/nasa/CryptoLib/security/advisories/GHSA-w6c3-pxvr-6m6j | CISA-ADP | ExploitVendor Advisory |
| https://github.com/nasa/CryptoLib/security/advisories/GHSA-w6c3-pxvr-6m6j | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| nasa cryptolib | < 1.4.2 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 9, 2026 | CVE Modified | [email protected] |
| Nov 11, 2025 | Initial Analysis | [email protected] |
| Oct 30, 2025 | CVE Modified | CISA-ADP |
| Oct 30, 2025 | New CVE Received | [email protected] |