F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv_handler fixed-slot copy TlmRecv_handler copies val.getSize bytes into entry.channelSize storage without confirming that the runtime value fits. When a telemetry update for a configured channel carries a serialized value larger than that channel fixed slot, the copy overwrites adjacent channel fields and causes corrupted packetized telemetry to be emitted. This issue is fixed in version 4.3.0.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 2
- StatusReceived → DeferredNVD modified 2026-10-15 14:45
- First seenCVSS 6.5NVD modified 2026-10-14 18:19
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 6
- https://github.com/nasa/fprime/commit/048fe04062b91be7af138df7e09cdd15812dde96
- https://github.com/nasa/fprime/commit/7eacd551aaf6d9a21e347ac2c8d827ca15ee5755
- https://github.com/nasa/fprime/pull/4878
- https://github.com/nasa/fprime/releases/tag/v4.3.0a1
- https://github.com/nasa/fprime/security/advisories/GHSA-grrq-8rmr-xf83
- https://github.com/nasa/fprime/security/advisories/GHSA-grrq-8rmr-xf83