CVE-2026-82479
Received Received - Intake

Buffer Overflow in NASA cFS SBN TCP Module

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulDB

Description
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tcp/fsw/src/sbn_tcp_if.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local network. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-30
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82479
EUVD
EUVD-2026-68150

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nasa cfs to 7.0.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in NASA's cFS up to version 7.0.1, specifically in the OS_read function of the SBN TCP Module. It occurs due to improper handling of the MsgSz argument, allowing manipulation that leads to buffer overflow. The attack requires access from within the local network.

Detection Guidance

This vulnerability involves a buffer overflow in NASA cFS up to 7.0.1 within the SBN TCP Module. Detection requires inspecting network traffic for abnormal message sizes targeting the tcp module, particularly examining the MsgSz argument in OS_read function calls. Check for unusual packet sizes or malformed TCP segments from local network sources.

Impact Analysis

The buffer overflow could allow an attacker within the local network to execute arbitrary code, crash the system, or gain unauthorized access to sensitive data. This may lead to system instability or compromise of the cFS environment.

Mitigation Strategies

Update NASA cFS to a version beyond 7.0.1 to address the buffer overflow in the SBN TCP Module. If an update is not available, consider disabling the SBN TCP Module or restricting network access to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82479. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart