{"id":"CVE-2026-105164","published":"2026-10-04T22:16:59.490","lastModified":"2026-10-06T15:04:52.637","description":"A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read. Remote exploitation of the attack is possible. The pull request to fix this issue awaits acceptance.","cvssScore":2.7,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwes":["CWE-119","CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/nasa/cFS/","tags":[]},{"url":"https://github.com/nasa/cFS/issues/893","tags":[]},{"url":"https://github.com/nasa/cFS/pull/984","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-105164","tags":[]},{"url":"https://vuldb.com/submit/969930","tags":[]},{"url":"https://vuldb.com/vuln/413396","tags":[]},{"url":"https://vuldb.com/vuln/413396/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/nasa/cFS/","tags":[]},{"url":"https://github.com/nasa/cFS/issues/893","tags":[]},{"url":"https://github.com/nasa/cFS/pull/984","tags":[]}],"hasPoc":true,"ai":null}