Heap Buffer Overflow in CryptoLib for CCSDS Space Data Link Security Protocol

CVE-2025-29911

What is CVE-2025-29911?

A vulnerability in CryptoLib affects the CCSDS Space Data Link Security Protocol, allowing attackers to exploit the Crypto_AOS_ProcessSecurity function. By crafting a malicious AOS frame with an insufficient length, an attacker can induce a Denial of Service (DoS) condition or potentially execute arbitrary code. The root cause is a failure to verify the buffer length during processing of the Frame Error Control Field (FECF), which can lead to a heap buffer overflow. No patched versions have been released as of the publication date.

References