CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a…

CVE-2026-21898 affects NASA's CryptoLib software, which provides security for spacecraft communications using the CCSDS Space Data Link Security Protocol. The vulnerability exists in the Crypto_AOS_ProcessSecurity function prior to version 1.4.3, where memory is read without proper bounds checking when parsing AOS frame hashes. This could potentially allow memory disclosure or corruption in spacecraft communication systems. The issue has been patched in CryptoLib version 1.4.3. Given the critical nature of spacecraft systems and the potential for communication security compromise, this vulnerability represents a high-severity issue for aerospace applications.