Product by NASA
CryptoLib
28 known vulnerabilities in CryptoLib (NASA), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-30216 | CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length | 9.4 | |
| Critical | CVE-2025-29912 | CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity | 9.8 | |
| Critical | CVE-2025-29909 | CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability | 9.8 | |
| High | CVE-2026-79954 | NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID | — | |
| Critical | CVE-2025-29911 | CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function | 9.8 | |
| Critical | CVE-2025-29913 | CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow | 9.8 | |
| Critical | CVE-2025-30356 | Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` | 9.8 | |
| High | CVE-2025-59534 | CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() | 7.3 | |
| High | CVE-2026-22026 | CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion | 7.5 | |
| High | CVE-2026-21900 | CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern | 5.9 | |
| High | CVE-2026-22023 | CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern | 7.5 | |
| High | CVE-2025-64096 | CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check | 8.8 | |
| High | CVE-2026-22697 | NASA CryptoLib: Heap-based Buffer Overflow | 7.5 | |
| High | CVE-2026-21898 | CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity | 8.2 | |
| High | CVE-2025-54878 | Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` | 8.6 | |
| Medium | CVE-2026-22025 | CryptoLib Memory Leak on HTTP Error Response in KMC Client | 3.7 | |
| High | CVE-2025-29910 | CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak | 7.5 | |
| High | CVE-2024-44910 | CryptoLib: Out-of-Bounds Read | 7.5 | |
| High | CVE-2024-44911 | CryptoLib: Out-of-Bounds Read | 7.5 | |
| Medium | CVE-2026-22024 | CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion | 5.3 | |
| High | CVE-2024-44912 | CryptoLib: Out-of-Bounds Read | 7.5 | |
| High | CVE-2026-21897 | CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters | 7.3 | |
| Critical | CVE-2025-46673 | NASA CryptoLib: Improper Control of Dynamically-Managed Code Resources | 4.9 | |
| Critical | CVE-2025-46674 | NASA CryptoLib: Active Debug Code | 3.5 | |
| Medium | CVE-2026-22027 | CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion | 6.0 |