CVE-2026-21899— CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-21899
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string
Source: NVD (National Vulnerability Database)
Vulnerability Description
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, in base64urlDecode, padding-stripping dereferences input[inputLen - 1] before checking that inputLen > 0 or that input != NULL. For inputLen == 0, this becomes an OOB read at input[-1], potentially crashing the process. If input == NULL and inputLen == 0, it dereferences NULL - 1. This issue has been patched in version 1.4.3.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
CryptoLib 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CryptoLib是NASA开源的一个应用程序。用于使用 CCSDS 空间数据链路安全协议提供纯软件解决方案。 CryptoLib 1.4.3之前版本存在缓冲区错误漏洞，该漏洞源于base64urlDecode函数在检查前解引用输入，可能导致越界读取或进程崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-21899
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-21899
请登录查看更多情报信息。
Same Patch Batch · nasa · 2026-01-10 · 10 CVEs total
| CVE-2026-21898 | 8.2 HIGH | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity |
| CVE-2026-22697 | 7.5 HIGH | CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON b |
| CVE-2026-21897 | 7.3 HIGH | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters |
| CVE-2026-21900 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern | |
| CVE-2026-22025 | CryptoLib Memory Leak on HTTP Error Response in KMC Client | |
| CVE-2026-22026 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaust | |
| CVE-2026-22023 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pa | |
| CVE-2026-22024 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion | |
| CVE-2026-22027 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion |
IV. Related Vulnerabilities
Same product: CryptoLib
- CVE-2026-22697
CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base - CVE-2026-22027
CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA H - CVE-2026-22026
CryptoLib Unbounded Memory Allocation in KMC HTTP Response H - CVE-2026-22025
CryptoLib Memory Leak on HTTP Error Response in KMC Client - CVE-2026-22024
CryptoLib Memory Leak in KMC Encrypt Function Leads to Resou
Same vendor: nasa
- CVE-2026-41144
F´ (F Prime) has Integer Overflow in FileUplink - CVE-2026-5476
NASA cFS cfe_tbl_passthru_codec.c CFE_TBL_ValidateCodecLoadS - CVE-2026-5475
NASA cFS CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg - CVE-2026-5474
NASA cFS CCSDS Packet Header to_lab_passthru_encode.c CFE_MS - CVE-2026-5473
NASA cFS Pickle pickle.load deserialization
Same weakness: CWE-125
- CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bou - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-3508
ASUS System Control Interface 缓冲区错误漏洞
V. Comments for CVE-2026-21899
No comments yet