CVE-2026-92159

Deferred Deferred - Pending Action

Buffer Overflow in F Prime Telemetry Packetizer

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: GitHub, Inc.

Description

F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv_handler fixed-slot copy TlmRecv_handler copies val.getSize bytes into entry.channelSize storage without confirming that the runtime value fits. When a telemetry update for a configured channel carries a serialized value larger than that channel fixed slot, the copy overwrites adjacent channel fields and causes corrupted packetized telemetry to be emitted. This issue is fixed in version 4.3.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-92159

EUVD

EUVD-2026-101409

Affected Vendors & Products

Vendor	Product	Version / Range
nasa	fprime	< 4.3.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-130	The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.
CWE-805	The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-92159 is a vulnerability in the NASA F Prime framework affecting the Svc::TlmPacketizer component. It occurs when telemetry data larger than a configured channel slot is processed without validation. The system copies the data into a fixed-size buffer without checking size, causing adjacent fields to be overwritten and resulting in corrupted telemetry output.

Detection Guidance

To detect this vulnerability, monitor for corrupted telemetry packets or crashes in F Prime deployments using Svc::TlmPacketizer with versions 4.2.1 or earlier. Check logs for oversized telemetry values or buffer overflow warnings in TlmPacketizer components.

Impact Analysis

This vulnerability can lead to corrupted telemetry data being emitted, potentially causing incorrect system behavior or failures. It may disrupt operations relying on accurate telemetry, such as monitoring or control systems. Exploitation requires access to the telemetry stream, such as through a GenericHub component.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by compromising the integrity of telemetry data. Corrupted telemetry output due to buffer overflow may lead to inaccurate data reporting, which could violate data accuracy requirements under GDPR Article 5 and HIPAA Security Rule standards for integrity of protected health information.

Mitigation Strategies

Upgrade F Prime to version 4.3.0 or later to address the buffer overflow issue in TlmPacketizer.
Validate telemetry inputs to ensure they fit within configured channel slot sizes before processing.
Implement network segmentation to limit exposure of telemetry bridges like GenericHub.

Hi! I’m here to help you understand CVE-2026-92159. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70