CVE-2026-82478

HIGH 7.3

NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_request of the file trick_source/sim_services/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-121 CWE-119
Vendor	nasa
Product	trick
Published	Aug 30, 2026

Stay Ahead of the Next One

Get instant alerts for nasa trick

Be the first to know when new high vulnerabilities affecting nasa trick are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

NASA / Trick

19.6.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397028 vuldb.com: https://vuldb.com/vuln/397028/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82478 vuldb.com: https://vuldb.com/submit/888016 app.notion.com: https://app.notion.com/p/Stack-based-Buffer-Overflow-in-NASA-Trick-JSONVariableServer-via-Unbounded-sscanf-on-Network-Receive-39cbd773e51180e1917cd717b90b8bc8?source=copy_link

Credits

🔍 juntheworld (VulDB User) VulDB CNA Team