Malformed Frame Vulnerability in Aviation VHF Link Control Systems
CVE-2025-71413

6MEDIUM

Key Information:

Vendor

Atn-b1

Status
Cpdlc
Vendor
CVE Published:
7 August 2026

What is CVE-2025-71413?

A vulnerability exists in the Aviation Very High Frequency (VHF) Link Control systems due to the handling of malformed or out-of-sequence frames at the X.25 layer. Attackers can exploit this weakness remotely over radio frequencies, potentially causing repeated system resets. This may increase the operational workload for the affected systems, leading to reduced situational awareness for users.

Affected Version(s)

CPDLC All versions

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
third-party-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martin Strohmeier of Armasuisse reported this vulnerability to CISA.
.