CVE-2025-46675

Description

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.

PUBLISHED Reserved 2025-04-27 | Published 2025-04-27 | Updated 2025-04-28 | Assigner mitre

Problem types

CWE-913 Improper Control of Dynamically-Managed Code Resources

Product status

References

securitybynature.fr/post/hacking-cryptolib/ exploit

securitybynature.fr/post/hacking-cryptolib/

github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2

github.com/nasa/CryptoLib/pull/358

github.com/nasa/CryptoLib/pull/359

cve.org (CVE-2025-46675)

nvd.nist.gov (CVE-2025-46675)

Download JSON