CVE-2025-46674CWE-489

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream…

Low · published April 27, 2025

CVSS v3.1
3.5
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Weakness
CWE-489 · Active Debug Code
Published
2025-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream…
    cvelistv5