CVE-2026-54086: SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SLE API for Javato a version that resolves this vulnerability.Fixed in 5.1.7
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the SLE API for Java before version 5.1.7 that run an SLE listening service are exposed to unauthenticated clients that can connect to that service.
What does an attacker need to do to exploit this issue?
An attacker needs network access to the SLE listening service. They can send ISP1 PDUs with an attacker-controlled body length, or malformed or truncated input, without requiring authentication or user interaction.
Are confidentiality or data integrity affected?
The provided severity vector indicates no confidentiality or integrity impact. The impact is limited to availability, through exceptions, resource leakage, and denial of service.
What is the remediation?
Upgrade the SLE API for Java to version 5.1.7, which fixes the issue.