CVE-2025-29909CWE-191CWE-787

CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

High · published March 17, 2025

CVSS v4.0
8.9
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

⚡ A heap buffer overflow in CryptoLib could expose satellite systems to remote code execution! Your spacecraft's safety depends on fixing this ASAP! 🚀 Think of CryptoLib as the air traffic control for satellites — without proper protocols in place, a rogue pilot could send a fake flight plan, leading to chaos in the skies! An attacker could send a malicious TC frame, creating out-of-bounds memory writes. This could lead to a denial of service, where mission-critical systems go dark or, worse, allow remote code execution, handing control over to the enemy. That's an absolute nightmare for any ground station!

Put simply

Think of CryptoLib as the air traffic control for satellites — without proper protocols in place, a rogue pilot could send a fake flight plan, leading to chaos in the skies! This vulnerability in CryptoLib's `Crypto_TC_ApplySecurity()` function allows attackers to manipulate the handling of incoming TC frames, leading to possible remote code execution due to lack of strict validation of those frames.

What to do

An attacker could send a malicious TC frame, creating out-of-bounds memory writes. This could lead to a denial of service, where mission-critical systems go dark or, worse, allow remote code execution, handing control over to the enemy. That's an absolute nightmare for any ground station! Patch to the latest version after commit c7e8a8745ff4b5e9bd7e500e91358e86d5abedcc immediately. Review and implement strict validation checks on incoming TC frames to prevent further exploitation. Don't let the skies go unchecked! You've got this! With these steps, you can secure your systems and keep those satellites flying high! 🛡️

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01084 · 64.9th percentile
Weaknesses
CWE-191 · Integer Underflow (Wrap or Wraparound); CWE-787 · Out-of-bounds Write
Published
2025-03-17T21:55Z
EPSS history
Timeline
  • 17 MAR 21:55Z
    CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability
    cvelistv5