This vulnerability (CVE-2026-35084) involves a stack-based buffer overflow (CWE-121) in the dali-devconfig component of MBS Single-A version V1_0_0_0. An attacker with existing user privileges can remotely trigger this overflow to escalate privileges to root, potentially compromising the entire system. The CVSS 4.0 base score is 8.7, indicating a high severity with network attack vector, low attack complexity, no user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation allows a remote attacker with user privileges to gain full root access, leading to complete system compromise. This includes full control over system resources, data, and potentially the ability to install persistent malware or disrupt system operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges where possible and monitor for suspicious activity related to dali-devconfig. Avoid exposing vulnerable versions to untrusted networks if feasible.