CVE-2026-92157

Name of the Vulnerable Software and Affected Versions F´ (F Prime) versions prior to 4.3.0

Description Range validation in the Svc::FileDownlink SendPartial() function is flawed because the addition of startOffset and length is not checked, allowing the range check to be bypassed. This results in a wrapped m endOffset that is inconsistent with m byteOffset. If a source file is larger than a valid startOffset and a SendPartial command provides a length that, when summed with the offset, wraps below the file size, the system triggers FW ASSERT. This leads to a process abort or reset, resulting in a denial of service.

Recommendations Update F´ (F Prime) to version 4.3.0.