Opensatkit vulnerabilities
We track 3 vulnerabilities in Opensatkit products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2026.
Latest Opensatkit vulnerabilities
- 9.8 Critical severity
Opensatkit: Stack-based Buffer Overflow
An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames (Source1Filename and the string returned by FileUtil_FileStateStr) into this buffer without any length checking and
- 7.5 High severity
Opensatkit: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files via crafted value to the FileUtil_GetFileInfo function.
- 7.8 High severity
Opensatkit: Stack-based Buffer Overflow
An issue was discovered in OpenSatKit 2.2.1. The DirName field in the telecommand is provided by the ground segment and must be treated as untrusted input. The program copies DirName into the local buffer DirWithSep using strcpy. The size of this buffer is OS_