CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a…

CVE-2026-22697 is a heap buffer overflow vulnerability in NASA's CryptoLib software prior to version 1.4.3. The vulnerability occurs in the KMC crypto service integration when decoding Base64-encoded data fields. An oversized Base64 string in KMC JSON responses can cause out-of-bounds writes on the heap, potentially leading to process crashes and code execution. CryptoLib is used to secure communications between spacecraft running core Flight System (cFS) and ground stations using the CCSDS Space Data Link Security Protocol. The issue has been patched in version 1.4.3.