Denial of Service Vulnerability in Svc::FileDownlink Component of Fprime Framework
CVE-2026-67977

7.5HIGH

Key Information:

Vendor

NASA

Status
Fprime Framework
Vendor
CVE Published:
3 August 2026

What is CVE-2026-67977?

An integer overflow issue in the Svc::FileDownlink::SendPartial component of the Fprime framework version 4.2.2 could enable attackers to craft specific inputs that lead to a Denial of Service (DoS) situation. This vulnerability poses significant risks, as it could result in the system becoming unresponsive, interrupting critical operations and services reliant on the framework. Users and administrators should be vigilant about applying security patches and upgrades to mitigate any potential attack scenarios.

References

https://github.com/nasa/fprime
https://github.com/freedomfoxvare/cve/issues/1

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.