Search results

Complete cFE Requirements Tracing

Status: Open.

#2773 In nasa/cFE;

· dzbaker opened on Jul 2, 2026

[Security] cfe/modules/msg — 4 novel findings (HIGH: memset OOB write + broken priext macro; MEDIUM: checksum OOB read driven by wire-controlled length)

Status: Open.

#2745 In nasa/cFE;

· GaltRanch opened on May 26, 2026

Replace unsafe strcmp() usage with bounded string comparison functions

bug

Status: Open.

#2738 In nasa/cFE;

· brandt-nasa opened on May 20, 2026

Scrub EVS Requirements

requirements

Status: Open.

Task

#2724 In nasa/cFE;

· dzbaker opened on May 13, 2026

·  

v7.0.2

Update TBL Design Documentation

docsThis change only affects documentation.This change only affects documentation.

Status: Open.

Task

#2721 In nasa/cFE;

· dzbaker opened on May 13, 2026

·  

v7.0.2

Update EVS Design Documentation

docsThis change only affects documentation.This change only affects documentation.

Status: Open.

Task

#2719 In nasa/cFE;

· dzbaker opened on May 13, 2026

·  

v7.0.2

Integer overflow in cfe_tbl_load.c

bug

security

Status: Open.

Bug

#2707 In nasa/cFE;

· EmbyOne opened on May 8, 2026

[SECURITY] Unbounded loop on attacker-controlled CCSDS Length in CFE_MSG_ComputeCheckSum enables OOB read on every checksum validation

security

Status: Open.

Bug

#2699 In nasa/cFE;

· Sy2n0 opened on Apr 26, 2026

[SECURITY] Missing lower-bound validation on CCSDS Length field in SB transmit path enables 32 KiB heap exfiltration via 8-byte UDP datagram (TO_LAB downlink)

bug

security

Status: Open.

Bug

#2698 In nasa/cFE;

· Sy2n0 opened on Apr 26, 2026

[SECURITY] Unsigned integer underflow in CFE_SB_GetUserDataLength returns SIZE_MAX-class value for malformed messages, enabling OOB read in downstream consumers

bug

cFE-SB

security

Status: Open.

Bug

#2697 In nasa/cFE;

· Sy2n0 opened on Apr 26, 2026

cFS DoS via Unvalidated AppEntryPoint in CFE_ES_START_APP_CC Command

bug

Status: Open.

Bug

#2684 In nasa/cFE;

· dzbaker opened on Mar 9, 2026

·  

v7.0.2

Security Hardening: GitHub Actions Input Handling + Pointer-Size Safety Cleanup

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

security

Status: Open.

Feature

#2680 In nasa/cFE;

· anilyagiz opened on Feb 10, 2026