Buffer overflow in Nasa Cfs
CVE-2026-5474
A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw/src/to_lab_passthru_encode.c of the component CCSDS Packet Header Handler. Performing a manipulation results in heap-b…
Vulnerability class: Buffer Overflow
EPSS: 0.000 (5.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Nasa Cfs — versions 7.0
- Nasa Core_flight_system
Weakness classification (CWE)
References
- VDB-355078 | NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MSG_GetSize heap-based overflow (technical-description, Third Party Advisory, VDB Entry, vdb-entry)
- VDB-355078 | CTI Indicators (IOB, IOC, IOA) (signature, Permissions Required, permissions-required, VDB Entry)
- Submit #781950 | NASA cFS 7.0.0 Heap over-read via untrusted CCSDS length in TO_LAB sendto (Third Party Advisory, VDB Entry, third-party-advisory)
- cna@vuldb.com (issue-tracking, Issue Tracking)
- cna@vuldb.com (Product, product)
Frequently asked questions
- What is CVE-2026-5474?
- CVE-2026-5474 is a medium-severity vulnerability in Nasa Cfs, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.3/10. Published 2026-04-03.
- How severe is CVE-2026-5474?
- Medium severity. CVSS v3 base score is 6.3 out of 10.