Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CryptoLib — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in CryptoLib, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses for CryptoLib, a cryptographic library developed by SecureRoot, focusing primarily on implementation flaws and cryptographic misconfigurations. The collection encompasses critical vulnerabilities discovered between 2018 and the present, including buffer overflows, side-channel attacks, and improper key management issues reported across various versions of the software. Visitors can utilize this resource to track the vendor's historical security advisories, analyze the prevalence of specific weakness classes within cryptographic implementations, or review the complete vulnerability history of the CryptoLib product line to assess risk exposure. The data is curated from public advisories, researcher disclosures, and official security bulletins to provide a comprehensive view of the product's security posture without duplicating entries or including unverified claims. This centralized index serves as a technical reference for security professionals, auditors, and developers seeking to understand the evolution of security defects in this specific cryptographic library. By examining the aggregated records, users can identify patterns in how vulnerabilities were addressed and evaluate the effectiveness of past remediation efforts. The page remains updated regularly to ensure that the latest findings are included, facilitating timely security assessments and informed decision-making for organizations relying on CryptoLib for their encryption needs.

Vendor: nasa

CVE ID Title CVSS Severity Published
CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID CWE-306 8.7 High 2026-09-18
CVE-2026-22697 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) CWE-122 7.5 High 2026-01-10
CVE-2026-22027 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion CWE-122 9.8 - 2026-01-10
CVE-2026-22026 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion CWE-789 7.5 - 2026-01-10
CVE-2026-22025 CryptoLib Memory Leak on HTTP Error Response in KMC Client CWE-401 - - 2026-01-10
CVE-2026-22024 CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion CWE-401 7.5 - 2026-01-10
CVE-2026-22023 CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern CWE-125 9.1 - 2026-01-10
CVE-2026-21900 CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern CWE-125 9.1 - 2026-01-10
CVE-2026-21899 CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string CWE-125 4.7 Medium 2026-01-10
CVE-2026-21898 CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity CWE-125 8.2 High 2026-01-10
CVE-2026-21897 CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters CWE-787 7.3 High 2026-01-10
CVE-2025-64096 CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check CWE-121 9.8AI Critical AI 2025-10-30
CVE-2025-59534 CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() CWE-78 7.3 High 2025-09-23
CVE-2025-54878 Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` CWE-122 8.6 High 2025-08-11
CVE-2025-46675 CryptoLib 安全漏洞 CWE-913 3.5 Low 2025-04-27
CVE-2025-46674 CryptoLib 安全漏洞 CWE-489 3.5 Low 2025-04-27
CVE-2025-46672 CryptoLib 安全漏洞 CWE-252 3.5 Low 2025-04-27
CVE-2025-46673 CryptoLib 安全漏洞 CWE-913 4.9 Medium 2025-04-27
CVE-2025-30356 Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` CWE-191 9.8AI Critical AI 2025-04-01
CVE-2025-30216 CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length CWE-122 9.4 Critical 2025-03-25
CVE-2025-29913 CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow CWE-125 9.8 - 2025-03-17
CVE-2025-29912 CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity CWE-122 9.8 - 2025-03-17
CVE-2025-29911 CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function CWE-122 9.8 - 2025-03-17
CVE-2025-29910 CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak CWE-401 7.5 - 2025-03-17
CVE-2025-29909 CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability CWE-191 9.8 - 2025-03-17

All 25 known CVE vulnerabilities affecting CryptoLib with full Chinese analysis, references, and POCs where available.