{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/cryptolib--1.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:nasa:cryptolib:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.4,"id":"CVE-2025-30216"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["CryptoLib (\u003c 1.4.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Nasa"],"content_html":"\u003cp\u003eNasa CryptoLib versions 1.3.3 and prior contain a heap overflow vulnerability in the \u003ccode\u003eCrypto_TM_ProcessSecurity\u003c/code\u003e function within \u003ccode\u003ecrypto_tm.c\u003c/code\u003e. The vulnerability stems from insufficient validation of the Secondary Header Length field in CCSDS Space Data Link Security Protocol packets. When the provided length exceeds the actual packet size, an out-of-bounds \u003ccode\u003ememcpy\u003c/code\u003e occurs into the \u003ccode\u003ep_new_dec_frame\u003c/code\u003e heap-allocated buffer. A public proof-of-concept (PoC) exists that demonstrates packet generation to trigger this memory corruption.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a remote, unauthenticated attacker to corrupt heap memory. Potential impacts include arbitrary code execution, system instability, or denial of service on systems utilizing the core Flight System (cFS).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Nasa CryptoLib to the version containing the fix referenced in commit 810fd66d592c883125272fef123c3240db2f170f.\u003c/li\u003e\n\u003cli\u003eImplement strict bounds checking for all incoming CCSDS packet header fields before passing data to \u003ccode\u003ememcpy\u003c/code\u003e operations.\u003c/li\u003e\n\u003cli\u003eMonitor network traffic directed toward systems running cFS for malformed CCSDS packets matching the logic: \u003ccode\u003eclaimed_length \u0026gt; (total_length - (header_offset + length_field_size))\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T22:23:25Z","date_published":"2026-10-29T22:23:25Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-30216-poc/","summary":"A high-severity heap overflow vulnerability in Nasa CryptoLib (v1.3.3 and prior) allows unauthenticated remote attackers to trigger out-of-bounds memory corruption via malformed CCSDS protocol packets, potentially leading to arbitrary code execution.","title":"Nasa CryptoLib: Heap overflow in Crypto_TM_ProcessSecurity (CVE-2025-30216)","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-30216-poc/"}],"language":"en","title":"CraftedSignal Threat Feed - CryptoLib (\u003c 1.4.0)","version":"https://jsonfeed.org/version/1.1"}