CVE-2026-92154: CWE-190: Integer Overflow or Wraparound in nasa fprime

The nasa fprime framework versions before 4.2.0 contain an integer overflow (CWE-190) in the Svc::FileUplink handleDataPacket function. The component validates the sum of byteOffset and dataSize using wrapping 32-bit unsigned arithmetic, which can cause the sum to wrap below the declared file size. This allows an attacker to seek to an attacker-controlled offset beyond the declared upload size and write data there. The vulnerability can cause file integrity loss and potentially large sparse-file growth or resource exhaustion. The vulnerability has a CVSS 3.1 score of 8.1 (high severity) with network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and high availability impact. The issue is fixed in version 4.2.0.

Exploitation of this vulnerability allows an attacker with low privileges to cause data to be written beyond the declared upload size, leading to file integrity loss. This can also result in large sparse-file growth or resource exhaustion, impacting system availability and integrity. There is no confidentiality impact reported.

Upgrade to nasa fprime version 4.2.0 or later, where this vulnerability is fixed. No other mitigation is indicated or required by the vendor advisory.