CVE-2026-21898CWE-125

CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity

High · published January 10, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

⚡ A memory oversight in CryptoLib could leave your spacecraft's communications vulnerable! 🚀 Think of it like a spaceship radio that broadcasts your secret codes without properly checking if the messages are scrambled. If the boundaries aren't set correctly, anyone could intercept and understand your transmissions, like a nosy neighbor eavesdropping on your private conversations! An attacker could potentially intercept and manipulate critical communications between the spacecraft and the ground station, leading to catastrophic failures in mission control. This vulnerability could jeopardize the integrity of the entire space mission!

Put simply

Think of it like a spaceship radio that broadcasts your secret codes without properly checking if the messages are scrambled. If the boundaries aren't set correctly, anyone could intercept and understand your transmissions, like a nosy neighbor eavesdropping on your private conversations! The Crypto_AOS_ProcessSecurity function in CryptoLib fails to perform appropriate bounds checking when reading memory during the parsing of AOS frame hashes, creating a risk for buffer overflows and data leaks.

What to do

An attacker could potentially intercept and manipulate critical communications between the spacecraft and the ground station, leading to catastrophic failures in mission control. This vulnerability could jeopardize the integrity of the entire space mission! Upgrade CryptoLib to version 1.4.3 to patch this vulnerability immediately. It's crucial to evaluate your use of this library in any space communication systems to prevent unauthorized access or manipulation of the data. You've got this! Secure your communications and ensure your mission's success. 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-01-10T00:10Z
EPSS history
Timeline
  • 10 JAN 00:10Z
    CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity
    cvelistv5