Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CryptoLib — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in CryptoLib, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses associated with CryptoLib, a cryptographic library developed by SecureStack Inc. The collection encompasses various vulnerability classes affecting the product, covering advisories published from 2019 to the present. Readers can track the vendor's security notices, understand specific weakness patterns such as buffer overflows or algorithmic flaws, and review the historical vulnerability record for this product.

Vendor: nasa

CVE ID Title CVSS Severity Published
CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID CWE-306 8.7 High 2026-09-18
CVE-2026-22697 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) CWE-122 7.5 High 2026-01-10
CVE-2026-22027 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion CWE-122 9.8 - 2026-01-10
CVE-2026-22026 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion CWE-789 7.5 - 2026-01-10
CVE-2026-22025 CryptoLib Memory Leak on HTTP Error Response in KMC Client CWE-401 - - 2026-01-10
CVE-2026-22024 CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion CWE-401 7.5 - 2026-01-10
CVE-2026-22023 CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern CWE-125 9.1 - 2026-01-10
CVE-2026-21900 CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern CWE-125 9.1 - 2026-01-10
CVE-2026-21899 CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string CWE-125 4.7 Medium 2026-01-10
CVE-2026-21898 CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity CWE-125 8.2 High 2026-01-10
CVE-2026-21897 CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters CWE-787 7.3 High 2026-01-10
CVE-2025-64096 CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check CWE-121 9.8AI Critical AI 2025-10-30
CVE-2025-59534 CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() CWE-78 7.3 High 2025-09-23
CVE-2025-54878 Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` CWE-122 8.6 High 2025-08-11
CVE-2025-46675 CryptoLib 安全漏洞 CWE-913 3.5 Low 2025-04-27
CVE-2025-46674 CryptoLib 安全漏洞 CWE-489 3.5 Low 2025-04-27
CVE-2025-46672 CryptoLib 安全漏洞 CWE-252 3.5 Low 2025-04-27
CVE-2025-46673 CryptoLib 安全漏洞 CWE-913 4.9 Medium 2025-04-27
CVE-2025-30356 Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` CWE-191 9.8AI Critical AI 2025-04-01
CVE-2025-30216 CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length CWE-122 9.4 Critical 2025-03-25
CVE-2025-29913 CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow CWE-125 9.8 - 2025-03-17
CVE-2025-29912 CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity CWE-122 9.8 - 2025-03-17
CVE-2025-29911 CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function CWE-122 9.8 - 2025-03-17
CVE-2025-29910 CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak CWE-401 7.5 - 2025-03-17
CVE-2025-29909 CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability CWE-191 9.8 - 2025-03-17

All 25 known CVE vulnerabilities affecting CryptoLib with full Chinese analysis, references, and POCs where available.