Approved changes feed: RSS · Atom

cpe:2.3:a:nasa:core_flight_system_(cfs)_health_&_safety_(hs)_application:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNasa (53a37713-6109-50d8-8bfa-fbb4eca64abd)
ProductCore Flight System (Cfs) Health & Safety (Hs) Application (661cebc7-a193-5abe-be40-5bbd41ec0198)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18064 vulnerable 2026-09-16 04:34:01.937608 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
HIGH (7.5)
An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to crash, resulting in a denial-of-service condition and processor reset.
Published: 2026-07-30T21:35:14.061Z
Updated: 2026-07-31T15:41:27.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15352 vulnerable 2026-07-29 00:26:18.054321 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference
HIGH (7.5)
A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processing a routine Housekeeping Telemetry request, leading to denial of service.
Published: 2026-07-16T19:48:43.886Z
Updated: 2026-07-17T13:26:28.783Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.