Description
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handler deserialization is vulnerable because the receive handler uses FW_ASSERT for externally influenced deserialization status and type validation and permits a command payload size subtraction to underflow. When an unauthenticated inter-processor hub peer sends a truncated buffer, an invalid HubType, or a header-only command-dispatch payload, malformed hub traffic aborts or resets the process, causing denial of service. This issue is fixed in version 4.2.0.
Published: 2026-10-14
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A vulnerability in the F Prime framework’s GenericHub deserializer allows an attacker to send a malformed or truncated buffer that triggers a signed integer underflow during size validation. The built‑in FW_ASSERT then aborts or resets the receiving process, causing a denial of service to the hub and any dependent components. The flaw originates from the fromBufferDriver_handler routine, which incorrectly validates the command payload size and type when handling external hub peer traffic.

Affected Systems

Systems running NASA’s F Prime framework before version 4.2.0 are affected. The flaw resides in the Svc::GenericHub module, which is used in spaceflight and embedded software applications built with F Prime. Any installation that relies on these components without the 4.2.0 update is vulnerable.

Risk and Exploitability

The vulnerability carries a CVSS score of 7.5 and is listed as not present in the CISA KEV catalog, with no EPSS data available. An attacker who can act as an unauthenticated inter‑processor hub peer can craft a truncated or otherwise malformed buffer, resulting in the hub process aborting or resetting. Because the flaw is triggered by external hub traffic, the attack is practical in environments where hub communication is not strictly authenticated or isolated.

Generated by OpenCVE AI on October 15, 2026 at 14:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade F Prime to version 4.2.0 or later, which removes the vulnerable deserialization logic.
  • If an immediate upgrade is not possible, isolate or quarantine the affected system to prevent the inter‑processor hub peer from sending malformed buffers.
  • Validate incoming buffer sizes prior to deserialization, ensuring the payload length is not less than the required header size to avoid underflow.
  • Apply code‑review and static‑analysis practices to confirm that no unsigned or signed arithmetic underflows influence assertion checks on externally supplied data.

Generated by OpenCVE AI on October 15, 2026 at 14:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Nasa
Nasa fprime
Vendors & Products Nasa
Nasa fprime

Tue, 20 Oct 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 14 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Description F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handler deserialization is vulnerable because the receive handler uses FW_ASSERT for externally influenced deserialization status and type validation and permits a command payload size subtraction to underflow. When an unauthenticated inter-processor hub peer sends a truncated buffer, an invalid HubType, or a header-only command-dispatch payload, malformed hub traffic aborts or resets the process, causing denial of service. This issue is fixed in version 4.2.0.
Title F´: GenericHub Malformed Buffer Assertion DoS
Weaknesses CWE-617
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Nasa Fprime
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-10-20T01:43:37.467Z

Reserved: 2026-09-15T17:13:57.865Z

Link: CVE-2026-92150

cve-icon Vulnrichment

Updated: 2026-10-20T01:43:25.769Z

cve-icon NVD

Status : Deferred

Published: 2026-10-14T18:19:34.330

Modified: 2026-10-20T02:17:13.467

Link: CVE-2026-92150

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T22:30:12Z

Weaknesses