CVE-2026-67977

HighCVSS 7.5

Published: 03/08/2026(UTC)Updated: 05/08/2026(UTC)Translated: 04/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

The Svc::FileDownlink::SendPartial component in fprime framework v4.2.2 has an integer overflow vulnerability that allows an attacker to cause a Denial of Service (DoS) via crafted input.

Risk Assessment

Risk of system downtime for applications using fprime, potentially affecting space or embedded systems.

Recommendation

Update fprime framework to a version that includes a fix for this component.

Other vulnerabilities in fprime framework

CVE-2026-67976High
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters.

Original NVD description (English source)

An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.