CVE-2026-82479— NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
Quick assessment
Affected
NASA cFS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在NASA cFS 7.0.1 及更早版本中发现了一个安全漏洞。受影响的代码位于 SBN TCP 模块中 文件中的 函数。对参数 的异常操作会导致缓冲区溢出。该攻击需要攻击者位于本地网络内部才能实施。供应商早在披露前已被联系，但未作出任何回应。
Possible ATT&CK Techniques 1 AI
T1210.003
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82479
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-82479
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82479
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-82479 (1)
-
🔗 Submit #888017: NASA cFS 7.0.1 Memory Corruption third-party-advisory
Other References for CVE-2026-82479 (2)
-
-
🔗 CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow vdb-entry technical-description
Same Patch Batch · NASA · 2026-08-30 · 3 CVEs total
| CVE-2026-82480 | 7.4 HIGH | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow |
| CVE-2026-82478 | 7.3 HIGH | NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow |
IV. Related Vulnerabilities
Same product: cFS
-
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLe -
CVE-2026-5476
NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadS -
CVE-2026-5475
NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg -
CVE-2026-5474
NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MS -
CVE-2026-5473
NASA cFS Pickle pickle.load deserialization
Same vendor: NASA
-
CVE-2026-82480
NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLe -
CVE-2026-82478
NASA Trick TCP Socket JSONVariableServerThread.cpp parse_req -
CVE-2026-72579
NASA HyperCP - OS Command Injection via Malicious HTTP Respo -
CVE-2026-72577
NASA fprime-gds - Missing Authentication and Path Traversal -
CVE-2026-18064
NASA Core Flight System (cFS) Health & Safety (HS) Applicati
Same weakness: CWE-120
-
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTT -
CVE-2026-82343
Gimp: heap out-of-bounds read and stack out-of-bounds access -
CVE-2026-75124
PLANET GS-4210-16P2S Memory Corruption via dispatcher.cgi _r -
CVE-2026-80186
Bluez: stack overflow in name2utf8 causes dos and potential -
CVE-2026-71399
Adobe XD | Buffer Overflow (CWE-120)
V. Comments for CVE-2026-82479
No comments yet