# NASA CryptoLib.

Every CVE that names NASA CryptoLib among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID](https://agentprime.io/advisories/CVE-2026-79954.md)
  `CVE-2026-79954` · CVE record: NASA CryptoLib · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Authentication bypass
- [CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)](https://agentprime.io/advisories/CVE-2026-22697.md)
  `CVE-2026-22697` · CVE record: nasa CryptoLib · CVSS 7.5 High · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion](https://agentprime.io/advisories/CVE-2026-22027.md)
  `CVE-2026-22027` · CVE record: nasa CryptoLib · CVSS 5.7 Medium · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion](https://agentprime.io/advisories/CVE-2026-22026.md)
  `CVE-2026-22026` · CVE record: nasa CryptoLib · CVSS 8.2 High · Not analysed yet · Published 10 Jan 2026 · Tags: Denial of service
- [CryptoLib Memory Leak on HTTP Error Response in KMC Client](https://agentprime.io/advisories/CVE-2026-22025.md)
  `CVE-2026-22025` · CVE record: nasa CryptoLib · CVSS 6.3 Medium · Not analysed yet · Published 10 Jan 2026 · Tags: Denial of service
- [CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion](https://agentprime.io/advisories/CVE-2026-22024.md)
  `CVE-2026-22024` · CVE record: nasa CryptoLib · CVSS 6.3 Medium · Not analysed yet · Published 10 Jan 2026 · Tags: Denial of service
- [CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern](https://agentprime.io/advisories/CVE-2026-22023.md)
  `CVE-2026-22023` · CVE record: nasa CryptoLib · CVSS 8.2 High · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern](https://agentprime.io/advisories/CVE-2026-21900.md)
  `CVE-2026-21900` · CVE record: nasa CryptoLib · CVSS 8.2 High · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string](https://agentprime.io/advisories/CVE-2026-21899.md)
  `CVE-2026-21899` · CVE record: nasa CryptoLib · CVSS 4.7 Medium · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity](https://agentprime.io/advisories/CVE-2026-21898.md)
  `CVE-2026-21898` · CVE record: nasa CryptoLib · CVSS 8.2 High · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters](https://agentprime.io/advisories/CVE-2026-21897.md)
  `CVE-2026-21897` · CVE record: nasa CryptoLib · CVSS 7.3 High · Not analysed yet · Published 10 Jan 2026 · Tags: Memory corruption
- [CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check](https://agentprime.io/advisories/CVE-2025-64096.md)
  `CVE-2025-64096` · CVE record: nasa CryptoLib · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2025 · Tags: Memory corruption
- [CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()](https://agentprime.io/advisories/CVE-2025-59534.md)
  `CVE-2025-59534` · CVE record: nasa CryptoLib · CVSS 7.3 High · Not analysed yet · Published 23 Sept 2025 · Tags: Command injection
- [Heap Buffer Overflow in NASA CryptoLib 1.4.0 \`Crypto_TC_Check_IV_Setup\`](https://agentprime.io/advisories/CVE-2025-54878.md)
  `CVE-2025-54878` · CVE record: nasa CryptoLib · CVSS 8.6 High · Not analysed yet · Published 11 Aug 2025 · Tags: Memory corruption
- [NASA CryptoLib: In NASA CryptoLib before 1.3.2, the key state is not checked before use…](https://agentprime.io/advisories/CVE-2025-46675.md)
  `CVE-2025-46675` · CVE record: NASA CryptoLib · CVSS 3.5 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-913
- [Active debug code in NASA CryptoLib](https://agentprime.io/advisories/CVE-2025-46674.md)
  `CVE-2025-46674` · CVE record: NASA CryptoLib · CVSS 3.5 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-489
- [NASA CryptoLib: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state…](https://agentprime.io/advisories/CVE-2025-46673.md)
  `CVE-2025-46673` · CVE record: NASA CryptoLib · CVSS 4.9 Medium · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-913
- [Unchecked return value in NASA CryptoLib](https://agentprime.io/advisories/CVE-2025-46672.md)
  `CVE-2025-46672` · CVE record: NASA CryptoLib · CVSS 3.5 Low · Not analysed yet · Published 27 Apr 2025 · Tags: CWE-252
- [Heap Buffer Overflow via Incomplete Length Check in \`Crypto_TC_ApplySecurity\`](https://agentprime.io/advisories/CVE-2025-30356.md)
  `CVE-2025-30356` · CVE record: nasa CryptoLib · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2025 · Tags: Memory corruption
- [CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length](https://agentprime.io/advisories/CVE-2025-30216.md)
  `CVE-2025-30216` · CVE record: nasa CryptoLib · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Mar 2025 · Tags: Memory corruption
- [CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow](https://agentprime.io/advisories/CVE-2025-29913.md)
  `CVE-2025-29913` · CVE record: nasa CryptoLib · CVSS 8.9 High · Not analysed yet · Published 17 Mar 2025 · Tags: Memory corruption
- [CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity](https://agentprime.io/advisories/CVE-2025-29912.md)
  `CVE-2025-29912` · CVE record: nasa CryptoLib · CVSS 8.9 High · Not analysed yet · Published 17 Mar 2025 · Tags: Memory corruption
- [CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function](https://agentprime.io/advisories/CVE-2025-29911.md)
  `CVE-2025-29911` · CVE record: nasa CryptoLib · CVSS 8.9 High · Not analysed yet · Published 17 Mar 2025 · Tags: Memory corruption
- [CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak](https://agentprime.io/advisories/CVE-2025-29910.md)
  `CVE-2025-29910` · CVE record: nasa CryptoLib · CVSS 5.5 Medium · Not analysed yet · Published 17 Mar 2025 · Tags: Denial of service
- [CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2025-29909.md)
  `CVE-2025-29909` · CVE record: nasa CryptoLib · CVSS 8.9 High · Not analysed yet · Published 17 Mar 2025 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=nasa-cryptolib>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/nasa-cryptolib/>. Everything for agents: <https://agentprime.io/llms.txt>.