Memory Leak Vulnerability in CryptoLib Affecting NASA's Core Flight System

CVE-2025-29910

What is CVE-2025-29910?

A memory leak has been detected in the crypto_handle_incrementing_nontransmitted_counter function of CryptoLib, which is utilized in securing communications between spacecraft and ground stations. This flaw arises from the allocation of memory via malloc without adequate freeing of that memory, causing resource depletion over time. Particularly in long-running processes and environments processing substantial amounts of data, this vulnerability could impair system performance or lead to a Denial of Service. As of now, no patched versions have been released to address this issue, posing significant risks to systems reliant on CryptoLib for high-throughput or continuous data streams.

References