CVE-2026-5476: Integer Overflow in NASA cFS
A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.
AI Analysis
Technical Summary
This vulnerability involves an integer overflow in the CFE_TBL_ValidateCodecLoadSize function of NASA cFS up to version 7.0.0 on 32-bit systems. The overflow occurs due to manipulation of input values leading to incorrect size validation. The attack complexity is high and exploitability is difficult, reducing the likelihood of successful exploitation. No known exploits are reported in the wild. A fix is planned but not yet released.
Potential Impact
The integer overflow could potentially lead to incorrect processing of codec load sizes within the affected function, which might cause unexpected behavior or memory corruption. However, due to the high attack complexity and difficult exploitability, the practical impact is limited. No known active exploitation has been reported.
Mitigation Recommendations
No official patch or fix is currently available. A fix is planned for an upcoming version milestone of NASA cFS. Users should monitor NASA's official advisories and update to the fixed version once released. Until then, no specific mitigation actions are documented.
CVE-2026-5476: Integer Overflow in NASA cFS
Description
A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.
CVSS v4.0
Score 2.1low
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an integer overflow in the CFE_TBL_ValidateCodecLoadSize function of NASA cFS up to version 7.0.0 on 32-bit systems. The overflow occurs due to manipulation of input values leading to incorrect size validation. The attack complexity is high and exploitability is difficult, reducing the likelihood of successful exploitation. No known exploits are reported in the wild. A fix is planned but not yet released.
Potential Impact
The integer overflow could potentially lead to incorrect processing of codec load sizes within the affected function, which might cause unexpected behavior or memory corruption. However, due to the high attack complexity and difficult exploitability, the practical impact is limited. No known active exploitation has been reported.
Mitigation Recommendations
No official patch or fix is currently available. A fix is planned for an upcoming version milestone of NASA cFS. Users should monitor NASA's official advisories and update to the fixed version once released. Until then, no specific mitigation actions are documented.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-04-03T07:51:24.742Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69cffcbb0a160ebd924911a1
Added to database: 04/03/2026, 17:45:31 UTC
Last enriched: 04/03/2026, 18:00:29 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 139
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.