F Prime EventManager uses the framework LogBuffer for event logging. When a bridged event via GenericHub delivers a legal LogBuffer that grows larger than the remaining log-argument budget, the EventManager fails to serialize the payload and triggers an assertion. The assertion causes the application to abort or reset, resulting in a denial of service. This condition arises from an incorrect calculation of buffer size (CWE-131) and unchecked return values (CWE-617).

The vulnerability affects the NASA F Prime framework, specifically all releases prior to 4.3.0. Deployments that route events through GenericHub and forward oversized LogBuffers to EventManager are susceptible.

With a CVSS score of 6.5 the vulnerability has a moderate severity. The EPSS score of < 1% indicates a very low exploitation probability, and it is not listed in the CISA KEV catalog. The likely attack vector is internal to a spacecraft or ground‑station system that uses F Prime’s GenericHub event bridge. An attacker or misconfigured component that can control the size of LogBuffer payloads can exploit the assertion, causing the process to abort or reset the entire system.