CVE-2025-46672

Description

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

PUBLISHED Reserved 2025-04-27 | Published 2025-04-27 | Updated 2025-04-29 | Assigner mitre

Problem types

CWE-252 Unchecked Return Value

Product status

References

securitybynature.fr/post/hacking-cryptolib/ exploit

github.com/nasa/CryptoLib/pull/360

securitybynature.fr/post/hacking-cryptolib/

github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2

cve.org (CVE-2025-46672)

nvd.nist.gov (CVE-2025-46672)

Download JSON