CVE-2026-5475
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
NASA cFS up to version 7.0.0 has a vulnerability in the function CFE_SB_TransmitMsg in file cfe_sb_priv.c of the CCSDS Header Size Handler component that can lead to memory corruption. The project was informed but has not responded.
Risk Assessment
Memory corruption can lead to unpredictable system behavior, potentially allowing an attacker to execute arbitrary code or cause a crash.
Recommendation
Monitor vendor updates and apply patches when available. Consider temporarily disabling or restricting access to the affected component.
Original NVD description (English source)
A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but has not responded yet.