9 matches found
CVE-2026-92157
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92160
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160 F´: SendPartial Integer Overflow Leading to Assertion DoS
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes mendOffset, and leaves mbyteOffs...
CVE-2026-92160
The F´ (F Prime) framework, used for spaceflight and embedded software, is vulnerable to an integer overflow in the Svc::FileDownlink SendPartial function prior to version 4.3.0 . Specifically, a wrapping sum of a provided length and a startOffset can bypass file-range validation, leading to a co...
EUVD-2026-101407
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrappe...
CVE-2026-92157
The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FileDownlink SendPartial range validation prior to version 4.3.0 . The root cause is unchecked arithmetic where startOffset plus length can wrap around, resu...
CVE-2026-67977: Uncontrolled Resource Consumption
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-67541
Name of the Vulnerable Software and Affected Versions fprime framework version 4.2.2 Description An integer overflow occurs in the Svc::FileDownlink::SendPartial component, which can be triggered by a crafted input to cause a Denial of Service DoS. An integer overflow is a condition where an...