CVE-2026-21897— CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters
Quick assessment
Affected
nasa CryptoLib
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CryptoLib是NASA开源的一个应用程序。用于使用 CCSDS 空间数据链路安全协议提供纯软件解决方案。 CryptoLib 1.4.3之前版本存在缓冲区错误漏洞，该漏洞源于数组边界检查不足导致越界写入，可能影响参数查找或注册逻辑。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-21897
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters
Source: CVE Program / CVE List V5
Vulnerability Description
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_Config_Add_Gvcid_Managed_Parameters function only checks whether gvcid_counter > GVCID_MAN_PARAM_SIZE. As a result, it allows up to the 251st entry, which causes a write past the end of the array, overwriting gvcid_counter located immediately after gvcid_managed_parameters_array[250]. This leads to an out-of-bounds write, and the overwritten gvcid_counter may become an arbitrary value, potentially affecting the parameter lookup/registration logic that relies on it. This issue has been patched in version 1.4.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
CryptoLib 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CryptoLib是NASA开源的一个应用程序。用于使用 CCSDS 空间数据链路安全协议提供纯软件解决方案。 CryptoLib 1.4.3之前版本存在缓冲区错误漏洞，该漏洞源于数组边界检查不足导致越界写入，可能影响参数查找或注册逻辑。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-21897
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 10500 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-21897
请登录查看更多情报信息。
Same Patch Batch · nasa · 2026-01-10 · 10 CVEs total
| CVE-2026-21898 | 8.2 HIGH | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity |
| CVE-2026-22697 | 7.5 HIGH | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON b |
| CVE-2026-21899 | 4.7 MEDIUM | CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64u |
| CVE-2026-21900 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern | |
| CVE-2026-22025 | CryptoLib Memory Leak on HTTP Error Response in KMC Client | |
| CVE-2026-22026 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaust | |
| CVE-2026-22023 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pa | |
| CVE-2026-22024 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion | |
| CVE-2026-22027 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion |
IV. Related Vulnerabilities
Same product: CryptoLib
-
CVE-2026-79954
NASA CryptoLib 1.5.0 - TC receive path accepts Security Asso -
CVE-2026-22697
CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base -
CVE-2026-22027
CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA H -
CVE-2026-22026
CryptoLib Unbounded Memory Allocation in KMC HTTP Response H -
CVE-2026-22025
CryptoLib Memory Leak on HTTP Error Response in KMC Client
Same vendor: nasa
-
CVE-2026-92160
F´: SendPartial Integer Overflow Leading to Assertion DoS -
CVE-2026-92155
F´: FileUplink Unknown Packet Type Assertion DoS -
CVE-2026-92150
F´: GenericHub Malformed Buffer Assertion DoS -
CVE-2026-92154
F´: File size bounds bypass in Svc::FileUplink via unsigned -
CVE-2026-92158
F´: FpySequencer Integer Overflow in Stack Offset/Size Valid
Same weakness: CWE-787
-
CVE-2026-111382
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV -
CVE-2026-89062
联想能源管理驱动越界写入致蓝屏 -
CVE-2026-111280
snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClien -
CVE-2026-111275
nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nift -
CVE-2026-111270
libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSou
V. Comments for CVE-2026-21897
No comments yet