A stack-based buffer overflow exists in the AP_SmartAudio module of ArduPilot Copter. An attacker with local access can trigger the flaw through the AP_SmartAudio::loop routine, causing memory corruption that brings the flight controller to an abnormal state and results in a service interruption. The flaw does not provide a mechanism for code execution and its impact is confined to the affected device. The weakness is a classic example of buffer overflow, where unchecked write operations corrupt adjacent memory.

ArduPilot Copter, specifically the AP_SmartAudio component. Any firmware build that includes commit 92693e023793133e49a035daf37c14433e484778 or earlier is vulnerable. No specific version range is supplied, so all releases containing the affected code should be reviewed and patched once a corrected build is released.

The vulnerability carries a local attack vector; an attacker must be able to run code or supply input directly to the Copter. No public exploit is known, the CVSS score is 6.2, the EPSS score is < 1%, and it is not listed in CISA’s KEV catalog. Because the flaw triggers a denial of service rather than remote code execution, the overall risk level is moderate. Proper mitigation requires the deployment of the patched firmware as soon as it becomes available or restricting local access to the device.