CVE-2026-82479: NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
NASA cFS deployments using the SBN TCP Module are affected if they are running a version up to 7.0.1. The issue is in the module's TCP implementation, specifically the OS_read handling in modules/protocol/tcp/fsw/src/sbn_tcp_if.c.
What access does an attacker need?
An attacker must be able to carry out the attack from the local network. No privileges or user interaction are required according to the provided severity vector.
What is the impact of successful exploitation?
Manipulating the MsgSz argument can cause a buffer overflow. The reported vector indicates potential low-impact effects on confidentiality, integrity, and availability.
What can be done while a vendor fix is unavailable?
Restrict network access to systems running the SBN TCP Module so that untrusted local-network hosts cannot reach them. The vendor reportedly did not respond to the disclosure, and no fixed version is provided.