The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters.
Metrics
Affected Vendors & Products
References
History
Wed, 05 Aug 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Input Validation in fprime SignalGen Leading to Denial of Service | |
| Weaknesses | CWE-20 CWE-703 |
Wed, 05 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-400 | |
| Metrics |
cvssV3_1
|
Tue, 04 Aug 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Input Validation in fprime SignalGen Leading to Denial of Service | |
| Weaknesses | CWE-20 CWE-703 |
Mon, 03 Aug 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Nasa
Nasa fprime |
|
| Vendors & Products |
Nasa
Nasa fprime |
Mon, 03 Aug 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-05T15:05:43.940Z
Reserved: 2026-07-30T00:00:00.000Z
Link: CVE-2026-67976
Updated: 2026-08-05T15:05:39.839Z
No data.
No data.
OpenCVE Enrichment
Updated: 2026-08-05T17:30:07Z