CVE-2025-29909: nasa cryptolib Integer Underflow (Wrap or Wraparound)

Vulnerability summary

CVE-2025-29909 is a critical (CVSS 9.8) Integer Underflow (Wrap or Wraparound) vulnerability in nasa cryptolib. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.7% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 17-03-2025
   PublishedVulnerability first disclosed.
2. 18-03-2025
   Last modifiedVulnerability information updated.

Description

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a heap buffer overflow vulnerability in CryptoLib's `Crypto_TC_ApplySecurity()` allows an attacker to craft a malicious TC frame that causes out-of-bounds memory writes. This can result in denial of service (DoS) or, under certain conditions, remote code execution (RCE). Any application or system that relies on CryptoLib for Telecommand (TC) processing and does not strictly validate incoming TC frames is at risk. This includes satellite ground stations or mission control software where attackers can inject malformed frames. A patch is available at commit c7e8a8745ff4b5e9bd7e500e91358e86d5abedcc.

• CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.