Medium severity4.6NVD Advisory· Published Apr 3, 2026· Updated May 4, 2026
CVE-2026-5476
CVE-2026-5476
Description
A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit. Affected is the function CFE_TBL_ValidateCodecLoadSize of the file cfe/modules/tbl/fsw/src/cfe_tbl_passthru_codec.c. The manipulation leads to integer overflow. The complexity of an attack is rather high. The exploitability is told to be difficult. A fix is planned for the upcoming version milestone of the project.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=7.0.0
Patches
Vulnerability mechanics
References
4- vuldb.com/submit/781971nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/355080nvdThird Party AdvisoryVDB Entry
- github.com/nasa/cFS/issues/954nvdIssue Tracking
- vuldb.com/vuln/355080/ctinvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.