# CVE-2026-92154: F Prime FileUplink integer overflow in handleDataPacket

Source: https://junglewise.ai/threats/cve-2026-92154-f-f-prime-is-a-framework-that-enables-development-and-deployment  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-14. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-92154 · Severity: high · CVSS 8.1 · Published 2026-10-14

F Prime is a framework used to develop and deploy software for spacecraft and embedded systems. The FileUplink component contains a validation flaw that allows an attacker to write data beyond the declared file size by supplying specially crafted upload packets with offset and size values that wrap around due to unsigned integer overflow. This can corrupt files, exhaust storage resources, or cause denial of service.

Technologies: [Nasa F Prime](https://junglewise.ai/threats/technologies/f-prime). Vendors: [Nasa](https://junglewise.ai/threats/vendors/nasa).

## Quick answers

**Is CVE-2026-92154 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92154 being exploited in the wild.

**How severe is CVE-2026-92154?** High severity, with a CVSS score of 8.1, published 14 October 2026.

**Which products and versions are affected?** Nasa F Prime before 4.2.0.

**Is there a fix for CVE-2026-92154?** Yes: fixed in 4.2.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-92154 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-92154?** Check whether you run Nasa F Prime at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 4.2.0

## Technical details

The FileUplink component's handleDataPacket method performs offset and size validation using 32-bit unsigned arithmetic that can wrap, then seeks to an attacker-controlled large offset before writing data. When byteOffset plus dataSize wraps below the declared file size, the validation passes but data is written beyond intended bounds. An attacker can send crafted file-uplink DATA packets over the network to exploit this, resulting in file integrity loss, sparse-file growth, or resource exhaustion.

## Affected products

- NASA F Prime before 4.2.0

## Timeline

- 2026-10-14: disclosed
- 2026-03-31: patched

## References

- [https://github.com/nasa/fprime/commit/cacdd555456bd83ab395b521d56c0330470ea798](https://github.com/nasa/fprime/commit/cacdd555456bd83ab395b521d56c0330470ea798)
- [https://github.com/nasa/fprime/pull/4919](https://github.com/nasa/fprime/pull/4919)

## Related threats

- [NASA F Prime FileDownlink integer overflow bypass](https://junglewise.ai/threats/cve-2026-92160-f-f-prime-is-a-framework-that-enables-development-and-deployment)
- [F Prime TlmPacketizer buffer overflow in telemetry handler](https://junglewise.ai/threats/cve-2026-92159-f-f-prime-is-a-framework-that-enables-development-and-deployment)
- [F Prime integer wraparound in FpySequencer STORE bounds check](https://junglewise.ai/threats/cve-2026-92158-f-f-prime-is-a-framework-that-enables-development-and-deployment)
- [F Prime FileDownlink SendPartial integer overflow denial of service](https://junglewise.ai/threats/cve-2026-92157-f-f-prime-is-a-framework-that-enables-development-and-deployment)
- [F Prime EventManager denial of service via oversized log packet](https://junglewise.ai/threats/cve-2026-92156-f-f-prime-is-a-framework-that-enables-development-and-deployment)