Heap Buffer Overflow in CryptoLib Affects NASA's Space Communications

CVE-2025-30356

What is CVE-2025-30356?

CryptoLib, which utilizes the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to safeguard communication between spacecraft and ground stations, has a heap buffer overflow vulnerability. This issue arises in the Crypto_TC_ApplySecurity function owing to inadequate validation on the frame length (fl) field in versions 1.3.3 and earlier. Although previous patches addressed a related underflow issue, they failed to fully mitigate unsafe calculations. Attackers can exploit this vulnerability by crafting malicious frames that result in a negative tf_payload_len, leading to an overflow in memory operations, allowing potential remote execution of arbitrary code.

References