CVE-2026-21898 | NASA CryptoLib up to 1.4.2 Link Security Protocol Crypto_AOS_ProcessSecurity out-of-bounds (GHSA-7ch6-2pmg-m853)

January 10, 2026 Yanac

A vulnerability, which was classified as critical, was found in NASA CryptoLib up to 1.4.2. This vulnerability affects the function Crypto_AOS_ProcessSecurity of the component Link Security Protocol. The manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-21898. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More