Findings

CVE-2026-5475

A vulnerability was determined in NASA cFS up to 7.0.0.

Published Apr 3, 2026 · updated Jul 24, 2026 · nasa core flight system

A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but has not responded yet.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2026 · NIST NVD

    Detected

    A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but has not responded yet.

  2. Jul 24, 2026 · NIST NVD

    Updated

    A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through an issue report but has not responded yet.

Affected

  • cpe nasa/core flight systemversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5475

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5475

    A vulnerability was determined in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption. The project was informed of the problem early through

    nvd.nist.gov

References

CVE-2026-5475 · ZeroDay Findings