PT-2026-2247 · Cryptolib · Cryptolib

Fuzz0X · Published 2026-01-10 · Updated 2026-01-15 · CVE-2026-22697

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3

Description CryptoLib is a software solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) for secure communication between spacecraft and ground stations. Versions prior to 1.4.3 contain a heap buffer overflow in the KMC crypto service integration when decoding Base64-encoded ciphertext/cleartext fields received from the KMC service. The issue arises because the Base64 decoder does not limit the size of the output written to the destination buffer, potentially leading to out-of-bounds writes on the heap. This can result in process crashes and, under certain conditions, code execution. The vulnerability is triggered by oversized Base64 strings within the KMC JSON response. The vulnerable component involves the decoding of ciphertext and cleartext fields.

Recommendations Versions prior to 1.4.3 should be updated to version 1.4.3 or later.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-22697

GHSA-QJX3-83JH-2JC4

Affected Products

Cryptolib

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22697.json · Exploit
• 🔥 https://github.com/nasa/CryptoLib/security/advisories/GHSA-qjx3-83jh-2jc4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-22697 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22697 · Vendor Advisory
• https://github.com/nasa/CryptoLib/releases/tag/v1.4.3 · Note
• https://t.me/CVEtracker/41895 · Telegram Post
• https://twitter.com/cracbot/status/2011755293882138743 · Twitter Post
• https://twitter.com/CVEnew/status/2009846297935983052 · Twitter Post