Cfs CVE-2026-5476

Q: What is the CVSS score of CVE-2026-5476?

CVE-2026-5476 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-18814 LOW

Integer Overflow or Wraparound (CWE-190)

2026-04-03 VulDB

GHSA-7x3q-gg96-9jgx

Integer Overflow Buffer Overflow Cfs

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 03, 2026 - 18:15 euvd

EUVD-2026-18814

Analysis Generated

Apr 03, 2026 - 18:15 vuln.today

CVE Published

Apr 03, 2026 - 17:30 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.

AnalysisAI

Integer overflow in NASA cFS CFE_TBL_ValidateCodecLoadSize function (cfe_tbl_passthru_codec.c) on 32-bit systems allows authenticated local attackers with low privileges to cause limited integrity and availability impact, though exploitation requires high attack complexity and no public exploit code has been identified; a fix is planned for an upcoming release milestone.

Technical ContextAI

The vulnerability is an integer overflow (CWE-190) in the table validation codec module of NASA's Core Flight System (cFS), a reusable, open-source flight software framework used in space missions. The affected function CFE_TBL_ValidateCodecLoadSize in cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c fails to properly validate codec load size parameters on 32-bit architectures, allowing integer wraparound conditions. This affects cFS versions up to and including 7.0.0. The CPE designation (cpe:2.3:a:nasa:cfs:*:*:*:*:*:*:*:*) indicates the vulnerability spans the entire cFS product line across affected versions. The integer overflow can cascade into buffer overflow conditions, as indicated by the combined tagging of both vulnerability classes.

RemediationAI

A vendor-released patch is not yet available; however, a fix is planned for an upcoming version milestone of the cFS project as noted in the description. Users should monitor the NASA cFS GitHub repository (https://github.com/nasa/cFS) and subscribe to project updates for the next scheduled release. As an interim mitigation, restrict access to cFS table codec functions to trusted authenticated users only, and ensure systems are deployed on 64-bit architectures where possible to eliminate the 32-bit integer overflow condition. Review and validate any custom codec implementations or table management operations that invoke CFE_TBL_ValidateCodecLoadSize. Reference the reported issue on GitHub (https://github.com/nasa/cFS/issues/954) for patch progress and technical details.