What’s Vulnerable › Products
nasa CryptoLib vulnerabilities
28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 25 published in the last 12 months.
Check whether your nasa CryptoLib version is affected
Latest nasa CryptoLib vulnerabilities
- CVE-2026-79954 — NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID (CVSS 8.7)
- CVE-2026-22697 — CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) (CVSS 7.5)
- CVE-2026-22027 — CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion (CVSS 6.0)
- CVE-2026-22026 — CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion (CVSS 7.5)
- CVE-2026-22025 — CryptoLib Memory Leak on HTTP Error Response in KMC Client (CVSS 3.7)
- CVE-2026-22024 — CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion (CVSS 5.3)
- CVE-2026-22023 — CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern (CVSS 7.5)
- CVE-2026-21900 — CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern (CVSS 5.9)
- CVE-2026-21899 — CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string (CVSS 4.9)
- CVE-2026-21898 — CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity (CVSS 8.2)
- CVE-2026-21897 — CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters (CVSS 7.3)
- CVE-2025-64096 — CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check (CVSS 8.8)
- CVE-2025-59534 — CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() (CVSS 7.8)
- CVE-2025-54878 — Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` (CVSS 8.6)
- CVE-2025-46675 — (CVSS 4.2)
- CVE-2025-46674 — (CVSS 9.9)
- CVE-2025-46673 — (CVSS 9.9)
- CVE-2025-46672 — (CVSS 8.8)
- CVE-2025-30356 — Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` (CVSS 9.8)
- CVE-2025-30216 — CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length (CVSS 9.1)
- CVE-2025-29913 — CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow (CVSS 9.8)
- CVE-2025-29912 — CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity (CVSS 9.8)
- CVE-2025-29911 — CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function (CVSS 9.8)
- CVE-2025-29910 — CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak (CVSS 7.5)
- CVE-2025-29909 — CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability (CVSS 9.8)