CR
Product
CryptoLib
28
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 14Medium 5Low 1
Watch
Add CryptoLib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-46673 | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS) Affected: before 1.3.2 |
| CVE-2025-46674 | 9.9 | Apr 27 | NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle Affected: before 1.3.2 |
| CVE-2025-30356 | 9.8 | Apr 1 | Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` Affected: <= 1.3.3 |
| CVE-2025-29913 | 9.8 | Mar 17 | CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow Affected: <= 1.3.3 |
| CVE-2025-29912 | 9.8 | Mar 17 | CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity Affected: <= 1.3.3 |
| CVE-2025-29911 | 9.8 | Mar 17 | CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function Affected: <= 1.3.3 |
| CVE-2025-29909 | 9.8 | Mar 17 | CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability Affected: <= 1.3.3 |
| CVE-2025-30216 | 9.1 | Mar 25 | CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length Affected: <= 1.3.3 |
Showing 8
