Product by NASA

    CryptoLib

    28 known vulnerabilities in CryptoLib (NASA), 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CryptoLib (NASA)
    CriticalCVE-2025-30216

    CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

    9.4
    CriticalCVE-2025-29912

    CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity

    9.8
    CriticalCVE-2025-29909

    CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

    9.8
    HighCVE-2026-79954

    NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

    —
    CriticalCVE-2025-29911

    CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function

    9.8
    CriticalCVE-2025-29913

    CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow

    9.8
    CriticalCVE-2025-30356

    Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`

    9.8
    HighCVE-2025-59534

    CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()

    7.3
    HighCVE-2026-22026

    CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

    7.5
    HighCVE-2026-21900

    CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern

    5.9
    HighCVE-2026-22023

    CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern

    7.5
    HighCVE-2025-64096

    CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check

    8.8
    HighCVE-2026-22697

    NASA CryptoLib: Heap-based Buffer Overflow

    7.5
    HighCVE-2026-21898

    CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity

    8.2
    HighCVE-2025-54878

    Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`

    8.6
    MediumCVE-2026-22025

    CryptoLib Memory Leak on HTTP Error Response in KMC Client

    3.7
    HighCVE-2025-29910

    CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak

    7.5
    HighCVE-2024-44910

    CryptoLib: Out-of-Bounds Read

    7.5
    HighCVE-2024-44911

    CryptoLib: Out-of-Bounds Read

    7.5
    MediumCVE-2026-22024

    CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion

    5.3
    HighCVE-2024-44912

    CryptoLib: Out-of-Bounds Read

    7.5
    HighCVE-2026-21897

    CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters

    7.3
    CriticalCVE-2025-46673

    NASA CryptoLib: Improper Control of Dynamically-Managed Code Resources

    4.9
    CriticalCVE-2025-46674

    NASA CryptoLib: Active Debug Code

    3.5
    MediumCVE-2026-22027

    CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion

    6.0

    All vulnerabilities in search

    All products by NASA