CVE-2026-82478: Stack-based Buffer Overflow in NASA Trick

This vulnerability exists in NASA Trick 19.6.0 in the JSONVariableServerThread::parse_request function of the TCP Socket Handler. Improper handling of input data leads to a stack-based buffer overflow, which can be triggered remotely without authentication or user interaction. The vendor was contacted but has not provided any response or remediation guidance. There is no known exploit in the wild as of the publication date.

Successful exploitation could allow remote attackers to cause a stack-based buffer overflow, potentially leading to denial of service or arbitrary code execution depending on the environment. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability, reflecting medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider applying workarounds such as disabling or restricting access to the affected TCP Socket Handler component until a patch is released.