4 results · Clear filters · Feed
-
Medium 6.5
F´: SendPartial Integer Overflow Leading to Assertion DoS
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because the wrapping sum bypasses file-range validation, …
-
Medium 6.5
F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv_handler fixed-slot copy TlmRecv_handler copies val.getSize bytes into entry.channelSize sto…
-
Medium 6.5
F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueue_internalInterfaceHandler packetization is vulnerable because EventManager accepts up to the…
-
Medium 6.5
F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range validation is vulnerable because unchecked startOffset plus length arithmetic bypa…