CVE-2026-105164 — NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds
A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation cau…
Published: 2026-10-04 · CVSS: 5.1 · CVSS 4.0
A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7