CVE-2026-5475: NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-03 · updated 2026-07-24
Weakness: CWE-119

Description

A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

nasa Core Flight System: through 7.0.0

References

https://github.com/nasa/cFS/
https://github.com/nasa/cFS/issues/953
https://vuldb.com/submit/781951
https://vuldb.com/vuln/355079
https://vuldb.com/vuln/355079/cti

Get alerted when CVE-2026-5475 or the next vulnerability affects your stack