Vulnerabilities
Summary — last 7 days
New vulnerabilities4,982▲ 170 vs. last week
Critical / high1,824▼ 937 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)1,070▲ 1,007 vs. last week
More filters
11 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.5) | 0.34% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, becomes m_endOffset, and leaves m_byteOffset greater than… | |
| Deferred | Medium (6.5) | 0.31% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv_handler fixed-slot copy TlmRecv_handler copies val.getSize bytes into entry.channelSize storage without confirming that the runtime value fits. When a… | |
| Deferred | High (7.2) | 0.75% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive stack write validation the bounds check adds attacker-controlled offset and size before memcpy, allowing integer wraparound to make an… | |
| Deferred | Medium (6.5) | 0.42% | — | F PrimeAI | 10/14/2026 | 10/20/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypasses the range check and stores a wrapped m_endOffset that… | |
| Deferred | Medium (6.5) | 0.54% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueue_internalInterfaceHandler packetization is vulnerable because EventManager accepts up to the framework LogBuffer maximum, but packet descriptor, event… | |
| Deferred | High (7.5) | 0.37% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by Svc::FileUplink is vulnerable because Header deserialization casts the byte to the Type enum without validating its range and… | |
| Deferred | High (8.1) | 0.56% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic and then seeks to the… | |
| Deferred | Critical (9.3) | 0.67% | — | Nasa F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dispatch is vulnerable because the deserialized port field is passed to serialOut_out, bufferOut_out, eventOut_out, or tlmOut_out without an… | |
| Deferred | High (7.5) | 0.47% | — | F PrimeAI | 10/14/2026 | 10/20/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handler deserialization is vulnerable because the receive handler uses FW_ASSERT for externally influenced deserialization status and type… | |
| Deferred | High (7.1) | 0.44% | — | Nasa F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink handling of Fw::FilePacket::StartPacket destination paths FileUplink copies the packet-controlled destinationPath and opens it for writing without… | |
| Deferred | High (7.5) | 0.49% | — | F PrimeAI | 10/14/2026 | 10/15/2026 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpacePacketDeframer dataIn_handler is vulnerable because the handler treats the minimum packet-length condition as FW_ASSERT rather than rejecting and returning the… |