Disclosures
NASA · CryptoLib
Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion
SecMateSECMATE-2025-0004
VendorNASA
ProductCryptoLib
ReportedNovember 29, 2025
FixedJanuary 6, 2026
PublishedJanuary 9, 2026
AdvisoryGHSA-w9cm-q69w-34x7
The libcurl write_callback function in the KMC crypto service client allows unbounded memory growth by reallocating response buffers without any size limit or overflow check. A malicious KMC server can return arbitrarily large HTTP responses, forcing the client to allocate excessive memory until the process is terminated by the OS.