CVE-2026-22023

Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3

Description CryptoLib is a software-only solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft and a ground station. Versions prior to 1.4.3 contain an out-of-bounds heap read issue within the cryptography aead encrypt() function. The issue stems from a flawed strtok pattern during KMC AEAD encrypt metadata parsing.

Recommendations Versions prior to 1.4.3 should be updated to version 1.4.3 or later.