The firmware contains a stack-based buffer overflow in the task_mavobc_entry function located in comm/task_comm.c. The description indicates that excessive data written beyond the intended buffer can corrupt adjacent memory. While the CVE description does not specify the exact input or method an attacker would use, it is inferred that an attacker who can supply data to this function could overwrite the stack and potentially execute arbitrary code.

The affected product is Firmament‑Autopilot FMT‑Firmware. Builds containing the commit de5aec or earlier include the vulnerable code. No specific firmware revision numbers are provided, so any firmware that has not been updated past this commit is at risk.

Because the vulnerability is a classic buffer overflow, the likely attack vector is an attacker supplying input to the task_mavobc_entry function, which could overflow the buffer. The potential impact could be high if malicious input reaches the function. The CVSS score is 7.3, the EPSS score is <1%, and the vulnerability is not listed in KEV. No documented exploits are referenced, but the inherent nature of a stack-based overflow suggests that risk remains significant for systems that accept external input processed by this function.