This vulnerability in OreSat Firmware v1.0 arises from improper length validation when copying the <filename> argument in the cmd_edl function during the edl fw_flash command processing. The use of memcpy to copy the filename into a 64-byte stack buffer without bounds checking allows a stack-based buffer overflow. An attacker with physical access to the UART3 serial interface can exploit this by sending a maliciously crafted command with an oversized filename, potentially leading to arbitrary code execution or system instability.

Successful exploitation can cause a stack-based buffer overflow, which may lead to arbitrary code execution, denial of service, or system compromise on devices running OreSat Firmware v1.0. The attack requires physical access to the UART3 serial interface, limiting the attack surface to local or physically proximate attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict physical access to the UART3 serial interface to trusted personnel only. Monitor for any vendor updates or official patches addressing this vulnerability.