CVE-2026-67977

Name of the Vulnerable Software and Affected Versions fprime framework version 4.2.2

Description An integer overflow occurs in the Svc::FileDownlink::SendPartial component, which can be triggered by a crafted input to cause a Denial of Service (DoS). An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.