PatchSiren

PatchSiren cyber security CVE debrief

CVE-2018-25367 NASA CVE debrief

NASA OpenVSP 3.16.1 contains a buffer overflow vulnerability in the geometry name field handling. A local attacker can trigger denial of service by supplying an excessively long string (approximately 5000 bytes) in the name input field within the Geom browser pod addition interface. The vulnerability results in application crash due to improper bounds checking on user-supplied input. This is a local attack vector requiring no privileges, with high availability impact but no confidentiality or integrity impact. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no required privileges, and high availability impact. The vulnerability was assigned CWE-120 (Classic Buffer Overflow). The CVE record shows a deferred status in the NVD. No known exploitation in ransomware campaigns has been documented.

Vendor
NASA
Product
openVSP
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-05-25
Original CVE updated
2026-07-23
Advisory published
2026-05-25
Advisory updated
2026-07-23

Who should care

Organizations using NASA OpenVSP for aircraft geometry modeling and design, particularly in multi-user environments where untrusted users may have local access to OpenVSP installations. System administrators managing engineering workstations with OpenVSP deployed. Security teams monitoring for denial-of-service conditions in specialized engineering software environments.

Technical summary

The vulnerability exists in the geometry name field parsing within OpenVSP 3.16.1's Geom browser pod addition interface. The application fails to properly validate the length of user-supplied strings before copying them into fixed-size buffers. An attacker with local access can paste approximately 5000 bytes into the name input field, triggering a buffer overflow that crashes the application. The CVSS 4.0 score of 6.9 (Medium) reflects the local attack vector and high availability impact with no confidentiality or integrity compromise. The vulnerability is classified as CWE-120 (Classic Buffer Overflow). No authentication or privileges are required to trigger the crash, but physical or logical local access is necessary.

Defensive priority

medium

Recommended defensive actions

  • Upgrade to a patched version of NASA OpenVSP when available; check the official NASA OpenVSP GitHub repository for security updates
  • Implement input validation and length restrictions on geometry name fields in custom OpenVSP deployments
  • Monitor for anomalous application crashes in OpenVSP environments that may indicate exploitation attempts
  • Review local access controls to limit untrusted user access to OpenVSP installations
  • Apply principle of least privilege for users requiring access to OpenVSP geometry editing functions

Evidence notes

Buffer overflow confirmed via source references. Attack vector is local only. No evidence of remote exploitation or code execution capability in disclosed materials. CVSS 4.0 scoring applied.

Sources and references

Verified primary and authoritative sources

  • CVE-2018-25367 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2018-25367

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2018-25367 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2018-25367

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.