NASA CryptoLib up to 1.3.3 CCSDS Space Data Link Security Protocol crypto_tm.c Crypto_TM_ProcessSecurity heap-based overflow

Summaryinfo

A vulnerability, which was classified as critical, was found in NASA CryptoLib up to 1.3.3. The affected element is the function Crypto_TM_ProcessSecurity of the file crypto_tm.c of the component CCSDS Space Data Link Security Protocol Handler. The manipulation results in heap-based overflow. This vulnerability is identified as CVE-2025-30216. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability, which was classified as critical, was found in NASA CryptoLib up to 1.3.3. Affected is the function Crypto_TM_ProcessSecurity of the file crypto_tm.c of the component CCSDS Space Data Link Security Protocol Handler. The manipulation with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a Heap Overflow vulnerability occurs in the `Crypto_TM_ProcessSecurity` function (`crypto_tm.c:1735:8`). When processing the Secondary Header Length of a TM protocol packet, if the Secondary Header Length exceeds the packet's total length, a heap overflow is triggered during the memcpy operation that copies packet data into the dynamically allocated buffer `p_new_dec_frame`. This allows an attacker to overwrite adjacent heap memory, potentially leading to arbitrary code execution or system instability. A patch is available at commit 810fd66d592c883125272fef123c3240db2f170f.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2025-30216 since 03/18/2025. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available.

Applying the patch 810fd66d592c883125272fef123c3240db2f170f is able to eliminate this problem. The bugfix is ready for download at github.com.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• NASA

Name

• CryptoLib

Version

• 1.3.0
• 1.3.1
• 1.3.2
• 1.3.3

License

• open-source

Website

• Product: https://github.com/nasa/CryptoLib/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion