PT-2025-17972 · Nasa · Nasa Cryptolib

CVE-2025-46675 · Published 2025-04-27 · Updated 2025-04-28

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2

Description The issue is related to the key state not being checked before use in NASA CryptoLib, potentially leading to spacecraft hijacking.

Recommendations For NASA CryptoLib versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider implementing additional validation checks for the key state before use.

Exploit

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2025-46675

Affected Products

Nasa Cryptolib

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46675.json · Exploit
• 🔥 https://securitybynature.fr/post/hacking-cryptolib · Exploit
• https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 · Patch
• https://github.com/nasa/CryptoLib/pull/358 · Patch
• https://github.com/nasa/CryptoLib/pull/359 · Patch
• https://osv.dev/vulnerability/CVE-2025-46675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46675 · Security Note
• https://t.me/cvetracker/22432 · Telegram Post
• https://t.me/cvenotify/119928 · Telegram Post
• https://twitter.com/transilienceai/status/1916336814115168528 · Twitter Post
• https://t.me/cvedetector/23816 · Telegram Post
• https://twitter.com/cybercronai/status/1916886496184865064 · Twitter Post
• https://twitter.com/SpaceCyberSec/status/1916507852589691222 · Twitter Post
• https://twitter.com/CVEnew/status/1916298844780085451 · Twitter Post