Skip to main content
Disclosures

NASA · CryptoLib

Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

8.2high
SecMateSECMATE-2025-0004
VendorNASA
ProductCryptoLib
VectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Timeline
Reported
Nov 29, 2025
Fixed
Jan 6, 2026
Published
Jan 9, 2026
Summary

The libcurl write_callback function in the KMC crypto service client allows unbounded memory growth by reallocating response buffers without any size limit or overflow check. A malicious KMC server can return arbitrarily large HTTP responses, forcing the client to allocate excessive memory until the process is terminated by the OS.

Read the technical analysis

What's hidden in yours?

Find out