21 matches found
CVE-2026-92160
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92157
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
EUVD-2026-101317
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160
The F´ (F Prime) framework, used for spaceflight and embedded software, is vulnerable to an integer overflow in the Svc::FileDownlink SendPartial function prior to version 4.3.0 . Specifically, a wrapping sum of a provided length and a startOffset can bypass file-range validation, leading to a co...
EUVD-2026-101407
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92157
The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FileDownlink SendPartial range validation prior to version 4.3.0 . The root cause is unchecked arithmetic where startOffset plus length can wrap around, resu...
CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92157
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92157 F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
PT-2026-114346
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes m endOffset, and leaves m...
CVE-2026-92160: Integer Overflow or Wraparound
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92157: Integer Overflow or Wraparound
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
PT-2026-114343
Name of the Vulnerable Software and Affected Versions F´ F Prime versions prior to 4.3.0 Description Range validation in the Svc::FileDownlink SendPartial function is flawed because the addition of startOffset and length is not checked, allowing the range check to be bypassed. This results in a...
CVE-2026-67977
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-67541
Name of the Vulnerable Software and Affected Versions fprime framework version 4.2.2 Description An integer overflow occurs in the Svc::FileDownlink::SendPartial component, which can be triggered by a crafted input to cause a Denial of Service DoS. An integer overflow is a condition where an...
CVE-2026-67977: Uncontrolled Resource Consumption
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...