CVE-2026-5475 | NASA cFS up to 7.0.0 CCSDS Header Size cfe_sb_priv.c CFE_SB_TransmitMsg memory corruption (Issue 953)

A vulnerability labeled as critical has been found in NASA cFS up to 7.0.0. This impacts the function CFE_SB_TransmitMsg of the file cfe_sb_priv.c of the component CCSDS Header Size Handler. Executing a manipulation can lead to memory corruption.

This vulnerability appears as CVE-2026-5475. The attacker needs to be present on the local network. There is no available exploit.

The project was informed of the problem early through an issue report but has not responded yet.