The firmware version that includes commit 54c9722 contains a buffer overflow in the AuxJack function. The flaw allows an attacker to supply an oversized input that overflows a stack buffer, potentially overwriting control data such as return addresses. If successful, this can lead to arbitrary code execution with the privileges of the firmware process. The weakness is a classic buffer overflow under CWE‑121.

The only specific information provided identifies the affected product as striso‑control‑firmware at the exact commit 54c9722. No vendor or broader version ranges are listed, so any deployment of this firmware build is potentially impacted. No alternative products or vendor information is available.

The reported CVSS score of 7.5 indicates moderate to high severity, while the EPSS score of less than 1% suggests a low current likelihood of exploitation. The flaw is not listed in the CISA KEV catalog, so no publicly confirmed exploits exist yet. However, buffer overflows of this type are generally highly exploitable if the function can be exercised by an attacker, such as through an exposed AuxJack interface or by an adversary with local access. Because the exploit requirement is a crafted input, the risk depends on whether the firmware operates in a trusted environment and whether the AuxJack feature is accessible from untrusted networks.