F´ (F Prime) has Integer Overflow in FileUplink

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file

F´: Unvalidated Port Index in GenericHub

F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation

F´: FileUplink Unknown Packet Type Assertion DoS

F´: GenericHub Malformed Buffer Assertion DoS

F´: SpacePacketDeframer Small Packet Assertion DoS

F´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write

F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath

F´: SendPartial Integer Overflow Leading to Assertion DoS

F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry

F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge

F´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities