CVE-2026-5475

概要

参考情報

• nasa/cFS · Product
• nasa/cFS · Issue Tracking
• vuldb.com/submit/781951 · Third Party Advisory
• vuldb.com/vuln/355079 · Third Party Advisory
• vuldb.com/vuln/355079/cti · Permissions Required

core flight system のその他の脆弱性

• CVE-2026-5476中 4.6A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/mod…
• CVE-2026-5474高 8.8A vulnerability was found in NASA cFS up to 7.0.0. This affects the function CFE_MSG_GetSize of the file apps/to_lab/fsw/src/to_lab_passthru…
• CVE-2026-5473高 7.0A vulnerability has been found in NASA cFS up to 7.0.0. The impacted element is the function pickle.load of the component Pickle Module. Suc…
• CVE-2025-25374高 7.5In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external …
• CVE-2025-25373緊急 9.8The Memory Management Module of NASA cFS (Core Flight System) Aquila has insecure permissions, which can be exploited to gain an RCE on the …