Back to Database
Status published
High
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability...
Vulnerability Description
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000046
Credits & Attribution
No credits recorded in the NVD database.
References
More from nasa
View All →CVE-2025-64096
CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check
High
8.8
CVE-2025-59534
CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()
High
7.3
CVE-2025-54878
Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`
High
8.6
CVE-2025-30356
Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`
Critical
9.3
CVE-2025-30216
CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length
Critical
9.4
Affected Vendor
nasa
View all reports →Affected Software
pyblock
Vulnerable Versions:
1.0
Timeline
Official Publish:
February 9th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.