Issues · nasa/CF · GitHub

Labels Milestones

[Security] cfe/CF — 15 novel findings in cf_cfdp_r / cf_codec / cf_cmd / cf_cfdp (3 HIGH including remote-reachable wire-decode OOB read)

#499

· GaltRanch opened

on May 27, 2026

[SECURITY] OOB Heap Read in CF_CFDP_CopyStringFromLV via Unvalidated PDU LV Length Field — Remotely Triggerable via Crafted Metadata PDU

#491

· linerfan5114 opened

on May 6, 2026

Default TX/RX Msg IDs swapped between CMD/TLM types

#488

· dondej opened

on Apr 22, 2026

Unsafe Handling of Zero-Length Destination Buffer in CF_CFDP_GetMoveTarget() Can Trigger Out-of-Bounds Read

#484

· Fuzz0X opened

on Mar 10, 2026

Rename cf_cmd.c file to cf_cmds.c

#476

· thnkslprpt opened

on May 25, 2025

`CF_CFDP_ProcessPollingDirectories()` can be simplified

#467

· thnkslprpt opened

on Nov 28, 2024

Assert checks non-existent variable (`pt`) in `CF_CFDP_ProcessPlaybackDirectory()`

#465

· thnkslprpt opened

on Nov 28, 2024

f-sanitizer report runtime error in coverage-cf-cf_cmd-testrunner

#454

· avan989 opened

on Jun 11, 2024

f-sanitizer report run time error in coverage-cf-cf_cfdp-testrunner

#453

· avan989 opened

on Jun 11, 2024

f-sanitizer report run time error in coverage-cf-cf_cfdp_s-testrunner

#452

· avan989 opened

on Jun 11, 2024

f-sanitizer report run time error in coverage-cf-cf_cfdp_sbintf-testrunner

#451

· avan989 opened

on Jun 11, 2024

f-sanitizer report run time error in coverage-cf-cf_cfdp_r-testrunner

#450

· avan989 opened

on Jun 10, 2024