Heap Buffer Overflow in CryptoLib Affects NASA's Space Data Link Security Protocol

CVE-2025-29912

What is CVE-2025-29912?

The CryptoLib library, utilized in securing communications between spacecraft and ground stations using the CCSDS Space Data Link Security Protocol, has a vulnerability that can be exploited due to an unsigned integer underflow in the Crypto_TC_ProcessSecurity function. This issue arises when the frame length field in a Telecommand packet is improperly set to 0, causing a misinterpretation of the frame length as 65535. This miscalculation leads to a heap buffer overflow, allowing for out-of-bounds memory access. Exploiting this vulnerability could result in denial of service (DoS) attacks or even remote code execution. Users are strongly urged to apply the necessary patches or refrain from processing untrusted Telecommand packets until a fix is implemented.

References