EUVD-2026-18814
GHSA-7x3q-gg96-9jgx
Severity by source
CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.
AnalysisAI
Integer overflow in NASA cFS CFE_TBL_ValidateCodecLoadSize function (cfe_tbl_passthru_codec.c) on 32-bit systems allows authenticated local attackers with low privileges to cause limited integrity and availability impact, though exploitation requires high attack complexity and no public exploit code has been identified; a fix is planned for an upcoming release milestone.
Technical ContextAI
The vulnerability is an integer overflow (CWE-190) in the table validation codec module of NASA's Core Flight System (cFS), a reusable, open-source flight software framework used in space missions. The affected function CFE_TBL_ValidateCodecLoadSize in cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c fails to properly validate codec load size parameters on 32-bit architectures, allowing integer wraparound conditions. This affects cFS versions up to and including 7.0.0. The CPE designation (cpe:2.3:a:nasa:cfs:*:*:*:*:*:*:*:*) indicates the vulnerability spans the entire cFS product line across affected versions. The integer overflow can cascade into buffer overflow conditions, as indicated by the combined tagging of both vulnerability classes.
RemediationAI
A vendor-released patch is not yet available; however, a fix is planned for an upcoming version milestone of the cFS project as noted in the description. Users should monitor the NASA cFS GitHub repository (https://github.com/nasa/cFS) and subscribe to project updates for the next scheduled release. As an interim mitigation, restrict access to cFS table codec functions to trusted authenticated users only, and ensure systems are deployed on 64-bit architectures where possible to eliminate the 32-bit integer overflow condition. Review and validate any custom codec implementations or table management operations that invoke CFE_TBL_ValidateCodecLoadSize. Reference the reported issue on GitHub (https://github.com/nasa/cFS/issues/954) for patch progress and technical details.
The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to
NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any ar
In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the lau
NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memo
Buffer overflow in NASA Core Flight System (cFS) up to version 7.0.1 allows adjacent-network attackers to corrupt memory
Integer underflow in NASA cFS's cFE Software Bus module (versions up to 7.0.1) allows a network-reachable, low-privilege
Memory corruption in NASA cFS up to version 7.0.0 via manipulation of the CFE_SB_TransmitMsg function in the CCSDS Heade
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today