CVE-2026-92154High· 8.1▾ MidnightPoC availableF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 44.6 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
Exploit / PoC code exists
0.6%
0.6% → 0.6%
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic and then seeks to the large attacker-controlled offset before writing. When a file-uplink DATA packet supplies a byteOffset and dataSize whose unsigned sum wraps below the declared file size, data can be written beyond the declared upload size, causing file integrity loss and potentially large sparse-file growth or resource exhaustion. This issue is fixed in version 4.2.0.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-92151High· 7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications
CVE-2026-92155High· 7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications
CVE-2026-92157Medium· 6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications
CVE-2026-92158High· 7.2F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications
CVE-2026-92160Medium· 6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications
CVE-2026-92159Medium· 6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications