Vulnerabilidades em NASA
57 resultadosAnálise Vexday
A NASA apresenta um perfil de risco baixo com apenas 12 CVEs catalogadas e nenhuma sob ataque ativo confirmado. Duas vulnerabilidades foram divulgadas nos últimos 90 dias, sem críticas de severidade máxima, sendo a fraqueza dominante relacionada a buffer overflow (CWE-119), indicando necessidade de revisão em controles de memória mas sem pressão imediata de exploração.
CVE-2026-15352HIGHNASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer DereferenceEPSS 0.6%CVE-2026-21900HIGHCryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok PatternEPSS 0.6%CVE-2026-92157MEDIUMF´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertionEPSS 0.6%CVE-2026-22023HIGHCryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok PatternEPSS 0.6%CVE-2026-79954HIGHNASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCIDEPSS 0.6%CVE-2026-92150HIGHF´: GenericHub Malformed Buffer Assertion DoSEPSS 0.6%CVE-2026-92151HIGHF´: SpacePacketDeframer Small Packet Assertion DoSEPSS 0.5%CVE-2026-92156MEDIUMF´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridgeEPSS 0.5%CVE-2026-22025MEDIUMCryptoLib Memory Leak on HTTP Error Response in KMC ClientEPSS 0.5%CVE-2025-46672LOWNASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.EPSS 0.5%CVE-2026-82478MEDIUMNASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflowEPSS 0.5%CVE-2026-22697HIGHCryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)EPSS 0.5%CVE-2025-64096HIGHCryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length checkEPSS 0.5%CVE-2025-46673MEDIUMNASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space DEPSS 0.5%CVE-2025-29910MEDIUMCryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory LeakEPSS 0.5%CVE-2026-82802MEDIUMNASA earthdata-search granules Endpoint handler.js OpenSearchGranuleSearchLambda server-side request forgeryEPSS 0.5%CVE-2026-22024MEDIUMCryptoLib Memory Leak in KMC Encrypt Function Leads to Resource ExhaustionEPSS 0.5%CVE-2026-82801MEDIUMNASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgeryEPSS 0.5%CVE-2026-21898HIGHCryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurityEPSS 0.4%CVE-2026-92159MEDIUMF´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetryEPSS 0.4%