ArduPilot PR 35064 changes a port check that rejected serial IDs only above an array's element count; a value equal to the count could pass and index beyond the final valid entry.
Mon, 9 Nov 2026
Peripheral tunnel handlers receive identifiers from outside their immediate subsystem and should enforce valid bounds before addressing UART structures.
Inspect tests for the exact upper boundary and invalid IDs. This is a source-level issue report, not evidence of exploitation.