CVE-2025-29909: CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability
First published: Mon Mar 17 2025(Updated: )
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a heap buffer overflow vulnerability in CryptoLib's `Crypto_TC_ApplySecurity()` allows an attacker to craft a malicious TC frame that causes out-of-bounds memory writes. This can result in denial of service (DoS) or, under certain conditions, remote code execution (RCE). Any application or system that relies on CryptoLib for Telecommand (TC) processing and does not strictly validate incoming TC frames is at risk. This includes satellite ground stations or mission control software where attackers can inject malformed frames. A patch is available at commit c7e8a8745ff4b5e9bd7e500e91358e86d5abedcc.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CryptoLib | <1.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-29909?
CVE-2025-29909 is classified as a high severity vulnerability due to the potential for remote code execution through a heap buffer overflow.
How do I fix CVE-2025-29909?
To fix CVE-2025-29909, you should upgrade CryptoLib to version 1.3.4 or later, which addresses the heap buffer overflow issue.
What versions of CryptoLib are affected by CVE-2025-29909?
CryptoLib versions up to and including 1.3.3 are affected by CVE-2025-29909.
What type of vulnerability is CVE-2025-29909?
CVE-2025-29909 is a heap buffer overflow vulnerability that can compromise the security of communication between spacecraft and ground stations.
What are the consequences of not addressing CVE-2025-29909?
Failure to address CVE-2025-29909 may lead to unauthorized access, data manipulation, or control over spacecraft communications.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/cryptolib
- canonical/cryptolib