RVD#3227: CWE-134 (format), If format strings can be influenced by an attacker, they can be exploi... @ overy/px4discovery_init.c:89

[rvd-bot]

id: 3227
title: 'RVD#3227: CWE-134 (format), If format strings can be influenced by an attacker,
  they can be exploi... @ overy/px4discovery_init.c:89'
type: bug
description: If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification. . Happening @ ...overy/px4discovery_init.c:89
cwe:
- CWE-134
cve: None
keywords:
- flawfinder
- flawfinder_level_4
- static analysis
- testing
- triage
- CWE-134
- bug
- 'version: v1.7.0'
- 'robot component: PX4'
- components software
system: ./Firmware/src/drivers/boards/px4-stm32f4discovery/px4discovery_init.c:89:26
vendor: null
severity:
  rvss-score: 0
  rvss-vector: ''
  severity-description: ''
  cvss-score: 0
  cvss-vector: ''
links:
- https://github.com/aliasrobotics/RVD/issues/3227
flaw:
  phase: testing
  specificity: subject-specific
  architectural-location: application-specific
  application: N/A
  subsystem: N/A
  package: N/A
  languages: None
  date-detected: 2020-06-29 (20:37)
  detected-by: Alias Robotics
  detected-by-method: testing static
  date-reported: 2020-06-29 (20:37)
  reported-by: Alias Robotics
  reported-by-relationship: automatic
  issue: https://github.com/aliasrobotics/RVD/issues/3227
  reproducibility: always
  trace: '(context) #    define message(...) printf(__VA_ARGS__)'
  reproduction: See artifacts below (if available)
  reproduction-image: gitlab.com/aliasrobotics/offensive/alurity/pipelines/active/pipeline_px4/-/jobs/616402716/artifacts/download
exploitation:
  description: ''
  exploitation-image: ''
  exploitation-vector: ''
  exploitation-recipe: ''
mitigation:
  description: Use a constant for the format specification
  pull-request: ''
  date-mitigation: ''