CVE-2025-29909: CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a heap buffer overflow vulnerability in CryptoLib's CryptoTCApplySecurity() allows an attacker to craft a malicious TC frame that causes out-of-bounds memory writes. This can result in denial of service (DoS) or, under certain conditions, remote code execution (RCE). Any application or system that relies on CryptoLib for Telecommand (TC) processing and does not strictly validate incoming TC frames is at risk. This includes satellite ground stations or mission control software where attackers can inject malformed frames. A patch is available at commit c7e8a8745ff4b5e9bd7e500e91358e86d5abedcc.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CryptoLibto a version that resolves this vulnerability.Patch c7e8a8745ff4b5e9bd7e500e91358e86d5abedcc - Compensating control
For systems relying on CryptoLib for Telecommand (TC) processing that do not strictly validate incoming TC frames, enforce strict validation of incoming TC frames before calling CryptoLib’s Crypto_TC_ApplySecurity() to prevent malicious TC frames from triggering the heap buffer overflow.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29909?
CVE-2025-29909 is classified as a high severity vulnerability due to the potential for remote code execution through a heap buffer overflow.
How do I fix CVE-2025-29909?
To fix CVE-2025-29909, you should upgrade CryptoLib to version 1.3.4 or later, which addresses the heap buffer overflow issue.
What versions of CryptoLib are affected by CVE-2025-29909?
CryptoLib versions up to and including 1.3.3 are affected by CVE-2025-29909.
What type of vulnerability is CVE-2025-29909?
CVE-2025-29909 is a heap buffer overflow vulnerability that can compromise the security of communication between spacecraft and ground stations.
What are the consequences of not addressing CVE-2025-29909?
Failure to address CVE-2025-29909 may lead to unauthorized access, data manipulation, or control over spacecraft communications.