PT-2025-17969 · Nasa · Nasa Cryptolib

Published 2025-04-27 · Updated 2025-04-28 · CVE-2025-46672

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2

Description The issue is related to the OTAR crypto function in NASA CryptoLib, where the returned status is not checked, potentially leading to spacecraft hijacking.

Recommendations For NASA CryptoLib versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider implementing additional checks on the OTAR crypto function returned status to prevent potential hijacking.

Exploit

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2025-46672

Affected Products

Nasa Cryptolib

References · 10

• 🔥 https://securitybynature.fr/post/hacking-cryptolib · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-46672 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46672 · Vendor Advisory
• https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 · Note
• https://github.com/nasa/CryptoLib/pull/360 · Note
• https://t.me/cvedetector/23813 · Telegram Post
• https://twitter.com/cybercronai/status/1916886496184865064 · Twitter Post
• https://t.me/cvenotify/119925 · Telegram Post
• https://twitter.com/CVEnew/status/1916298842972291483 · Twitter Post
• https://t.me/cvetracker/22429 · Telegram Post