The flaw allows an attacker to overwrite critical internal files during the file import process, which can lead to arbitrary code execution or the exposure of sensitive information. The likely attack vector is through the import interface, where an attacker submits a crafted file that directs the system to write over protected files.

This vulnerability is present in FLY is FUN Aviation Navigation version 35.33. No other affected versions are documented in the available data.

Based on the description, it is inferred that an attacker who can reach the import functionality—potentially over a network—could exploit the overwrite to inject malicious code with the privileges of the application. The absence of a CVSS or EPSS score means the exact severity and exploitation probability cannot be quantified from the supplied data, but the potential for remote code execution and data leakage suggests a high risk. The vulnerability is not listed in the CISA KEV catalog, so there is no publicly known exploited exploit at this time, but the attack surface is presumably accessible if the import endpoint is exposed.