CVE-2026-92155

Name of the Vulnerable Software and Affected Versions F´ (F Prime) versions prior to 4.2.0

Description F´ (F Prime) is a framework for developing and deploying spaceflight and embedded software applications. A flaw exists in the Fw::FilePacket deserialization used by Svc::FileUplink where the Header deserialization casts a byte to the Type enum without validating its range. This allows FilePacket::fromSerialBuffer() to reach a default FW ASSERT, which triggers a process abort or reset of the default Ref application when a network file packet contains an unknown file-packet type byte, resulting in a denial of service.

Recommendations Update to version 4.2.0.