CVE-2026-67673

Name of the Vulnerable Software and Affected Versions OreSat Firmware version 1.0

Description A stack-based buffer overflow occurs in the cmd edl() function when processing the edl fw flash command. The issue arises because the <filename> argument is copied to a 64-byte stack buffer using memcpy() without validating the length of the input. An attacker with physical access to the UART3 serial interface can exploit this by sending a crafted command containing an oversized filename parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.