Heap Buffer Overflow in CryptoLib Affects Space Communication Security

CVE-2026-22697

What is CVE-2026-22697?

CryptoLib, utilized in securing communications between spacecraft and ground stations via the CCSDS Space Data Link Security Protocol, contains a heap buffer overflow vulnerability in its KMC crypto service integration. This issue arises from the Base64 decoding of ciphertext and cleartext without proper size limits on the decode destination buffer. Specifically, the vulnerability allows for oversized Base64 input to lead to out-of-bounds memory writes, potentially resulting in crashes or arbitrary code execution depending on system conditions. The issue was addressed in version 1.4.3.

References