Buffer overflow in Nasa Fprime
CVE-2026-41144
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to version 4.2.0, the bounds check byteOffset + dataSize > fileSize uses U32 addition that wraps around on o…
Vulnerability class: Integer Overflow
EPSS: 0.002 (36.8th percentile) — read the EPSS interpretation.
Affected products
- Nasa Fprime — versions 4.1.1, < 4.2.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)