low2.7
CVE-2026-105164
A flaw has been found in NASA cFS up to 7.0.1.
Impact
A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.
Affected products
| Product | Affected versions |
|---|---|
| NASA CFS | before 7.0.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.