CVE Explorer

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a65568eb5955727a464b514b12393979f8d8fbdf61b8e77823b2ac4fa65bf2aa

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e61e5780013c5b255afe4532478d963c1ec0dc9afb96553b63ddff3b258d5a56 · sha256:d65c1214b51da88f… · /containers/cna/affected/0

CWE assertions

1 source assertion

{"description":"n/a","lang":"en","type":"text"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e61e5780013c5b255afe4532478d963c1ec0dc9afb96553b63ddff3b258d5a56 · sha256:d65c1214b51da88f… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"url":"https://github.com/dazuo233/cve/issues/2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e61e5780013c5b255afe4532478d963c1ec0dc9afb96553b63ddff3b258d5a56 · sha256:d65c1214b51da88f… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer