CVE-2025-46675 LOW

CVE-2025-46675

Vendor Nasa

Product CryptoLib

Weakness CWE-913

Published April 27, 2025

Last update April 28, 2025

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking.

Key dates

02Disclosure timeline

April 27, 2025 CVE published

April 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-46675 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/913.html

Related vulnerabilities

04Related CVE

CVE-2026-47210 vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass CVE-2017-3202 The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2021-23267 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2023-6184