CVE-2026-105164 | NASA cFS up to 7.0.1 cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds (Issue 893)

October 4, 2026 Yanac

A vulnerability has been found in NASA cFS up to 7.0.1 and classified as problematic. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read.

This vulnerability is registered as CVE-2026-105164. Remote exploitation of the attack is possible. No exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More