A buffer overflow exists in the AP_InertialSensor_ADIS1647x.cpp file of the Ardupilot Rover firmware. An attacker with local access can trigger the overflow, causing the rover’s processing of inertial sensor data to crash and therefore deny service. The vulnerability allows the attacker to corrupt memory on the device, potentially halting operation until reset.

Ardupilot Rover systems that include the ADIS1647x inertial sensor component. The vulnerability was identified in the code commit v.c56439b045162058df0ff136afea3081fcd06d38. No specific firmware release numbers are listed, so any unpatched installation that incorporates this commit is affected.

The EPSS score of <1% indicates a low exploitation probability, and the CVE is not listed in the CISA KEV catalog, indicating that exploitation is currently undocumented. The attack requires local presence or a compromised onboard application to interact with the sensor driver, making it a local denial-of-service threat. While the severity could be high in mission-critical contexts, the likelihood of exploitation remains low without a documented exploit. The CVSS score of 6.2 indicates a medium severity vulnerability.