CVE-2026-82478 | NASA Trick 19.6.0 TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow

A vulnerability, which was classified as critical, has been found in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-82478. The attack is possible to be carried out remotely. No exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More