CVE-2026-67976

HighCVSS 7.5

Published: 03/08/2026(UTC)Updated: 05/08/2026(UTC)Translated: 04/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters.

Risk Assessment

Attackers can cause application or system failure, potentially disrupting services relying on the fprime framework.

Recommendation

It is recommended to update to the latest version of fprime framework and implement input parameter validation in the Ref::SignalGen component.

Other vulnerabilities in fprime framework

CVE-2026-67977High
The Svc::FileDownlink::SendPartial component in fprime framework v4.2.2 has an integer overflow vulnerability that allows an attacker to cause a Denial of Service (DoS) via crafted input.

Original NVD description (English source)