CVE-2025-46674

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - cve@mitre.org

Published

2025-04-27

Last modified

2025-04-28

Weaknesses

CWE-489

Affected products

• Cryptolib (Nasa)

References

• https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2
• https://github.com/nasa/CryptoLib/pull/365
• https://securitybynature.fr/post/hacking-cryptolib/