CVE-2026-92160 Details
Description
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes m_endOffset, and leaves m_byteOffset greater than the wrapped end offset. When an existing source file is larger than the supplied startOffset and a caller able to issue SendPartial supplies a length whose U32 sum with that offset wraps, the first data-packet send reaches FW_ASSERT and aborts or resets the process, causing denial of service. This issue is fixed in version 4.3.0.
A denial-of-service vulnerability has been identified in the NASA F' framework, specifically within the FileDownlink service's SendPartial method, prior to version 4.3.0. The issue arises from unchecked unsigned 32-bit integer addition in the range validation process. This flaw allows an attacker to craft a start offset and length that, when added together, wrap around and bypass the intended checks. As a result, the wrapped value can be used to manipulate internal offsets, leading to a reachable assertion that causes the process to abort or reset.
Users are advised to update to F' version 4.3.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/nasa/fprime/commit/33fe2a4fe3fd5ff1b14985669fbad09f070e9914 | [email protected] | Source CodeVendor |
| https://github.com/nasa/fprime/commit/95eeb5cfb44e5609eff0887f0e11e640cdacef6b | [email protected] | Source CodeVendor |
| https://github.com/nasa/fprime/pull/5565 | [email protected] | Source CodeVendor |
| https://github.com/nasa/fprime/releases/tag/v4.3.0 | [email protected] | Release NotesVendor |
| https://github.com/nasa/fprime/security/advisories/GHSA-8r3j-ghrh-55mw | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
| CWE-617 | Reachable Assertion | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| F´ | < 4.3.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 14, 2026 | New CVE Received | [email protected] |