Trick (19.6.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/trick-19.6.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 30 Aug 2026 07:09:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemote Buffer Overflow in NASA Trick JSONVariableServerhttps://feed.craftedsignal.io/briefs/2026-08-cve-2026-82478-nasa-trick/Sun, 30 Aug 2026 07:09:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-cve-2026-82478-nasa-trick/CVE-2026-82478 is a stack-based buffer overflow in the NASA Trick simulation environment (version 19.6.0) that enables remote attackers to trigger memory corruption via the TCP Socket Handler.NASA Trick version 19.6.0 contains a stack-based buffer overflow vulnerability within the JSONVariableServerThread::parse_request function, located in trick_source/sim_services/JSONVariableServer/JSONVariableServerThread.cpp. This component acts as a TCP socket handler for the simulation environment. An attacker can trigger this vulnerability by sending a maliciously crafted packet to the JSONVariableServer. Because the vulnerability exists within the request parsing logic, it is reachable by remote, unauthenticated attackers who have network access to the simulation server. Successful exploitation may lead to a denial-of-service condition via application crash or potentially arbitrary code execution in the context of the running simulation. NASA has not provided a response to this vulnerability disclosure, and no patch is currently available for version 19.6.0.

Impact

The vulnerability affects instances of the NASA Trick simulation framework version 19.6.0 that expose the JSONVariableServer over a TCP socket. If successfully exploited, the primary impact is service instability or a complete crash of the simulation server. In environments where the Trick server runs with high-privilege execution, there is a risk of arbitrary code execution, which could allow an attacker to gain control over the simulation environment and access sensitive data processed within the simulation pipeline.

Recommendation

  • Monitor network traffic destined for the Trick JSONVariableServer TCP ports for malformed or unusually large payloads that may indicate buffer overflow attempts.
  • Restrict network access to the Trick JSONVariableServer to authorized IP ranges only, using network segmentation or firewall rules, until an official patch is released by NASA.
  • Audit simulation server logs for sudden service restarts or anomalous process terminations that could indicate exploitation attempts causing service crashes.
]]>highadvisorycvevulnerabilityremote-code-executionnasa-trick