nasa CryptoLib vulnerabilities

CVEs per yearBy the year they were published

1. 202514
2. 202611

Newest CVEs

• CVE-2026-79954

  NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

  NASA · CryptoLib

  High8.7
• CVE-2026-22697

  CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)

  nasa · CryptoLib

  High7.5
• CVE-2026-22027

  CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion

  nasa · CryptoLib

  Medium5.7
• CVE-2026-22026

  CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

  nasa · CryptoLib

  High8.2
• CVE-2026-22025

  CryptoLib Memory Leak on HTTP Error Response in KMC Client

  nasa · CryptoLib

  Medium6.3
• CVE-2026-22024

  CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion

  nasa · CryptoLib

  Medium6.3
• CVE-2026-22023

  CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern

  nasa · CryptoLib

  High8.2
• CVE-2026-21900

  CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern

  nasa · CryptoLib

  High8.2
• CVE-2026-21899

  CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string

  nasa · CryptoLib

  Medium4.7
• CVE-2026-21898

  CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity

  nasa · CryptoLib

  High8.2