Skip to content Skip to footer

Stack Buffer Overflow in ESA’s asn1scc

Written by: Ricardo Fradique (research) and Milenko Starcik (publication) ESA's ASN1SCC is an open-source ASN.1 compiler for embedded systems. It generates data types, encoders, and decoders from ASN.1 specifications, with support for encoding formats including XML Encoding Rules (XER). These generated components provide the interface between structured data definitions and the applications that process incoming…

Read More

Security Testing Is a Continuous Process, Not a One-Time Event

Software products evolve constantly. New features are added, dependencies change, interfaces expand, and deployment environments become more complex. Each change can create new security assumptions - and new opportunities for those assumptions to fail. That is why vulnerability assessment should not be treated as a one-time activity performed shortly before a product ships. Effective security…

Read More

OpenC3 COSMOS v7.0.0: Security Issues Across Core Components

https://visionspace.com/wp-content/uploads/2026/03/COSMOS-Full-Demo-blogpost.mp4 Written by: Tanner Smith, Marceli Śliwiak, Ricardo Fradique, André Cirne, Andrzej Olchawa, Milenko Starcik Modern mission control and operational platforms increasingly rely on complex web-based interfaces, plugin ecosystems, and real-time data pipelines. While this flexibility enables rapid development and integration, it also introduces a broad attack surface, particularly when trust boundaries between components are not…

Read More

ArduPilot v4.6.3: From Mission Plan to Mission Abort

https://visionspace.com/wp-content/uploads/2026/02/Ardupilot-Demo.mp4 Written by: Marceli Śliwiak, Ricardo Fradique, Tanner Smith, Andrzej Olchawa, Milenko Starcik ArduPilot is one of the most widely adopted open-source autopilot platforms, powering autonomous operation across multi-rotor drones, fixed-wing aircraft, rovers, boats, and submarines. Its flexibility, rich feature set, and strong community adoption make it a cornerstone of both commercial and research unmanned systems.…

Read More

VisionSpace System Exploitation Workshop – Paris 2026

Join us for an in-depth workshop highlighting real-world vulnerabilities in space applications, from mission control software to onboard flight systems. Participants will learn how to identify, assess, and mitigate security weaknesses that can directly impact mission success. Held just before CYSAT Europe 2026 (May 20–21), this workshop offers a practical opportunity to deepen your understanding…

Read More

gr-satellites v5.8.0: Memory Corruption via Malformed Telemetry

gr-satellites is an open-source GNU Radio out-of-tree module designed for decoding telemetry from a wide range of satellite protocols. It is widely used by researchers, hobbyists, and professionals to process live RF signals and convert raw satellite transmissions into structured telemetry data. A recent security assessment of `gr-satellites v5.9.0` identified a security issue in the…

Read More