A vulnerability was determined in NASA Trick 19.6.0. (CVE-2026-82478)

CVE-2026-82478 is a stack-based buffer overflow vulnerability found in NASA Trick 19.6.0, specifically in the JSONVariableServerThread::parse_request function of the TCP Socket Handler component. This vulnerability arises from improper handling of input data, allowing remote attackers to trigger a buffer overflow condition. The issue affects only version 19.6.0. No vendor response or patch is currently available, and no known exploits are reported in the wild. The CVSS v3.1 base score is 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), reflecting remote attack vector with low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause denial of service by crashing the affected service. The impact affects confidentiality, integrity, and availability at a low level as per CVSS metrics. No active exploitation has been reported.

No official patch or remediation is currently available from the vendor, as they have not responded to the disclosure. Users should consider applying additional network-level protections such as restricting access to the affected service or employing intrusion prevention systems to detect anomalous traffic targeting the JSONVariableServerThread. Monitor vendor channels for any future updates or patches.