CVE-2026-92152

Name of the Vulnerable Software and Affected Versions F´ (F Prime) versions 4.1.0 through 4.1.x

Description Svc::GenericHub output-port dispatch fails to perform an explicit range check on the deserialized port field before passing it to serialOut out, bufferOut out, eventOut out, or tlmOut out. If a remote hub packet provides a port index outside the configured output-port array, builds with assertions enabled will abort. However, builds without assertions may experience out-of-bounds access to the output-port array, leading to heap memory corruption and potential remote code execution.

Recommendations Update to version 4.2.0.