CVE-2026-67976

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-08-03

Last updated on: 2026-08-31

Assigner: MITRE

Description

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service (DoS) via inputting unsafe parameters.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-31

Generated

2026-10-19

AI Q&A

2026-08-04

EPSS Evaluated

2026-10-18

NVD

CVE-2026-67976

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

The Ref::SignalGen component in fprime framework v4.2.2 fails to validate user-controlled parameters for safety. This allows attackers to exploit the lack of validation by providing unsafe inputs, which can lead to a Denial of Service (DoS) condition.

Detection Guidance

Detection of this vulnerability requires analyzing the Ref::SignalGen component in the fprime framework v4.2.2 for unsafe parameter handling. Check for unexpected crashes or resource exhaustion when processing user inputs. Review logs for abnormal signal generation behavior or DoS symptoms.

Impact Analysis

This vulnerability could allow attackers to disrupt the availability of systems using the fprime framework v4.2.2. If exploited, it may cause the Ref::SignalGen component to crash or become unresponsive, leading to service outages or degraded performance.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a Denial of Service (DoS) condition in a software component. Compliance impacts would depend on how the affected system is used in a regulated environment rather than the vulnerability itself.

Mitigation Strategies

Update the Ref::SignalGen component in the fprime framework to a version that validates user-controlled parameters to prevent unsafe inputs from causing a Denial of Service.

Hi! I’m here to help you understand CVE-2026-67976. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70