The vulnerability is a stack overflow in the "Main" function of Flipper Zero firmware. This flaw allows an attacker with sufficient input control to overwrite the stack, potentially leading to a crash or arbitrary code execution. The weakness is a classic buffer overflow (CWE-121).

The affected product is Flipper Zero firmware, specifically the codebase identified by commit ad2a80. No exact version or release information is available; the issue exists wherever that commit is present in the firmware.

The CVSS score is 8.4, and the EPSS score is unavailable, making it hard to gauge the overall risk quantitatively. The vulnerability is not listed in CISA KEV. The likely attack vector is local or device‑facing input that exercises the failed stack protection; it is uncertain whether remote exploitation is achievable without additional steps. The presence of a stack overflow suggests that, if exploitable, the risk could be high, potentially allowing arbitrary code execution. However, without further evidence of a usable exploit, the threat remains theoretical.