MEDIUM 5.3 NVD
CVE-2026-82480
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/fs
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfe_sb_util.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer underflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
References
- https://vuldb.com/cve/CVE-2026-82480
- https://vuldb.com/submit/888018
- https://vuldb.com/vuln/397030
- https://vuldb.com/vuln/397030/cti
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-30 via NVD.
vulnfeed aggregates 11450 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.