Denial of Service Vulnerability in F Prime Framework by NASA

CVE-2026-92156

What is CVE-2026-92156?

The F Prime framework, designed for spaceflight and embedded software applications, contains a vulnerability within its EventManager component. This flaw arises from improper handling of event logging, where excessive log payloads can lead to an assertion failure due to insufficient buffer space for log arguments. When a legitimate log event exceeds the remaining budget allocated for arguments, it causes the process to reset or abort, resulting in denial of service. The vulnerability has been addressed in version 4.3.0, ensuring more robust event processing and system stability.

References