Skip to content
Threat Feed
Subscribe

Product

CFE Software Bus (<= 7.0.1)

1 brief RSS
high advisory

Integer Underflow Vulnerability in NASA cFS cFE Software Bus

An integer underflow vulnerability in the CFE_SB_GetUserDataLength function of the NASA cFS cFE Software Bus (up to version 7.0.1) allows remote attackers to trigger memory corruption via manipulated message size arguments.

cFS +1
1c