CVE-2026-5474
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
In NASA cFS up to version 7.0.0, a heap-based buffer overflow exists in the function CFE_MSG_GetSize in file apps/to_lab/fsw/src/to_lab_passthru_encode.c. The attacker must have local network access. The project was informed but has not responded.
Risk Assessment
An attacker on the local network can cause a system crash or potentially execute arbitrary code, compromising the integrity and availability of the cFS system.
Recommendation
Contact the NASA cFS team for a patch or apply temporary network restrictions to limit access to the vulnerable component.
Original NVD description (English source)
A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw/src/to_lab_passthru_encode.c of the component CCSDS Packet Header Handler. Performing a manipulation results in heap-based buffer overflow. The attacker must have access to the local network to execute the attack. The project was informed of the problem early through an issue report but has not responded yet.