PT-2025-17972 · Nasa · Nasa Cryptolib

Published 2025-04-27 · Updated 2025-04-28 · CVE-2025-46675

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2

Description The issue is related to the key state not being checked before use in NASA CryptoLib, potentially leading to spacecraft hijacking.

Recommendations For NASA CryptoLib versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider implementing additional validation checks for the key state before use.

Exploit

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2025-46675

Affected Products

Nasa Cryptolib

References · 13

• 🔥 https://securitybynature.fr/post/hacking-cryptolib · Exploit
• https://github.com/nasa/CryptoLib/pull/358 · Patch
• https://github.com/nasa/CryptoLib/pull/359 · Patch
• https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 · Patch
• https://osv.dev/vulnerability/CVE-2025-46675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46675 · Security Note
• https://twitter.com/CVEnew/status/1916298844780085451 · Twitter Post
• https://t.me/cvenotify/119928 · Telegram Post
• https://twitter.com/SpaceCyberSec/status/1916507852589691222 · Twitter Post
• https://t.me/cvetracker/22432 · Telegram Post
• https://twitter.com/cybercronai/status/1916886496184865064 · Twitter Post
• https://twitter.com/transilienceai/status/1916336814115168528 · Twitter Post
• https://t.me/cvedetector/23816 · Telegram Post