Heap-based Buffer Overflow Affecting nasa/CryptoLib package, versions [0,]
Threat Intelligence
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UNMANAGED-NASACRYPTOLIB-9486550
- published20 Mar 2025
- disclosed18 Mar 2025
- creditMirko Bitetto
Introduced: 18 Mar 2025
NewCVE-2025-29909 (opens in a new tab)How to fix?
A fix was pushed into the master branch but not yet published.
Overview
Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the Crypto_TC_ApplySecurity() function in crypto_tc.c. An attacker can cause out-of-bounds memory writes by supplying a malicious TC frame containing a very small frame length (fl) value. This can result in denial of service or, under certain conditions, remote code execution. This is only exploitable if the incoming TC frames are not strictly validated.
PoC
Process a TC frame with the contents
6403000000