CVE-2026-82479CWE-119CWE-120

CVE-2026-82479

Medium · published August 30, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
5.3 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00379 · 30.7th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-30T10:16Z
References (5)
https://vuldb.com/cve/CVE-2026-82479 · [email protected]https://vuldb.com/submit/888017 · [email protected]https://vuldb.com/vuln/397029 · [email protected]https://vuldb.com/vuln/397029/cti · [email protected]https://vuldb.com/submit/888017 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 30 AUG 05:00Z
    NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
    cvelistv5