CVE-2026-22026— CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
Quick assessment
Affected
nasa CryptoLib
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CryptoLib是NASA开源的一个应用程序。用于使用 CCSDS 空间数据链路安全协议提供纯软件解决方案。 CryptoLib 1.4.3之前版本存在安全漏洞，该漏洞源于KMC加密服务客户端的libcurl write_callback函数允许无限制内存增长，可能导致分配过多内存。
Possible ATT&CK Techniques 1 AI
T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-22026
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
Source: CVE Program / CVE List V5
Vulnerability Description
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the libcurl write_callback function in the KMC crypto service client allows unbounded memory growth by reallocating response buffers without any size limit or overflow check. A malicious KMC server can return arbitrarily large HTTP responses, forcing the client to allocate excessive memory until the process is terminated by the OS. This issue has been patched in version 1.4.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的内存分配
Source: CVE Program / CVE List V5
Vulnerability Title
CryptoLib 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CryptoLib是NASA开源的一个应用程序。用于使用 CCSDS 空间数据链路安全协议提供纯软件解决方案。 CryptoLib 1.4.3之前版本存在安全漏洞，该漏洞源于KMC加密服务客户端的libcurl write_callback函数允许无限制内存增长，可能导致分配过多内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-22026
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-22026
请登录查看更多情报信息。
Same Patch Batch · nasa · 2026-01-10 · 10 CVEs total
| CVE-2026-21898 | 8.2 HIGH | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity |
| CVE-2026-22697 | 7.5 HIGH | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON b |
| CVE-2026-21897 | 7.3 HIGH | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters |
| CVE-2026-21899 | 4.7 MEDIUM | CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64u |
| CVE-2026-21900 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern | |
| CVE-2026-22025 | CryptoLib Memory Leak on HTTP Error Response in KMC Client | |
| CVE-2026-22023 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pa | |
| CVE-2026-22024 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion | |
| CVE-2026-22027 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion |
IV. Related Vulnerabilities
Same product: CryptoLib
-
CVE-2026-79954
NASA CryptoLib 1.5.0 - TC receive path accepts Security Asso -
CVE-2026-22697
CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base -
CVE-2026-22027
CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA H -
CVE-2026-22025
CryptoLib Memory Leak on HTTP Error Response in KMC Client -
CVE-2026-22024
CryptoLib Memory Leak in KMC Encrypt Function Leads to Resou
Same vendor: nasa
-
CVE-2026-92160
F´: SendPartial Integer Overflow Leading to Assertion DoS -
CVE-2026-92155
F´: FileUplink Unknown Packet Type Assertion DoS -
CVE-2026-92150
F´: GenericHub Malformed Buffer Assertion DoS -
CVE-2026-92154
F´: File size bounds bypass in Svc::FileUplink via unsigned -
CVE-2026-92158
F´: FpySequencer Integer Overflow in Stack Offset/Size Valid
Same weakness: CWE-789
-
CVE-2026-111279
Dragonfly through 2.0.2 Unbounded Memory Allocation via Nega -
CVE-2026-110258
OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Mult -
CVE-2026-110257
OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via Boot -
CVE-2026-85324
Active Directory Federation Services (AD FS) Denial of Servi -
CVE-2026-109149
beautifier js-beautify memory allocation
V. Comments for CVE-2026-22026
No comments yet