---
id: CVE-2026-54086
title: SLE API for Java is an implementation of CCSDS Space Link Extension Services
summary: >-
  SLE API for Java is an implementation of CCSDS Space Link Extension Services.
  Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body
  length and allocates a byte array without an upper bound, while malformed or
  tru…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-770
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T19:30:29.797'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-54086'
references:
  - url: >-
      https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc
    label: security-advisories@github.com
  - url: 'https://github.com/esa/sleapi-j/releases/tag/5.1.7'
    label: security-advisories@github.com
  - url: 'https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v'
    label: security-advisories@github.com
tags:
  - nvd
ingestedAt: '2026-10-13T19:43:28.946Z'
---

## Overview

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an unauthenticated client of the SLE listening service to trigger exceptions, resource leakage, and denial of service. This issue is fixed in version 5.1.7.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.