CVE-2026-5476 - CERT CVE
ID CVE-2026-5476
Sažetak A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.
Reference
CVSS
Base: 4.0
Impact: 6.4
Exploitability:2.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK HIGH SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:A/AC:H/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 03-04-2026 - 18:16
Objavljeno 03-04-2026 - 18:16