The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Nasa |
|
No data.
No data.
References
History
Tue, 04 Aug 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Input Validation in fprime SignalGen Leading to Denial of Service | |
| Weaknesses | CWE-20 CWE-703 |
Mon, 03 Aug 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Nasa
Nasa fprime |
|
| Vendors & Products |
Nasa
Nasa fprime |
Mon, 03 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-08-03T00:00:00.000Z
Updated: 2026-08-03T20:58:44.300Z
Reserved: 2026-07-30T00:00:00.000Z
Link: CVE-2026-67976
Vulnrichment
No data.
NVD
No data.
Redhat
No data.