fix: remove unsafe exec() in mmwave_sensor.c

[orbisai0security]

Summary

Fix high severity security issue in firmware/esp32-csi-node/main/mmwave_sensor.c.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	firmware/esp32-csi-node/main/mmwave_sensor.c:115

Description: Multiple memcpy operations in mmwave_sensor.c copy data from UART-received buffers directly into fixed-size local variables (float, uint32_t) without validating that the source buffer contains at least sizeof(destination_type) bytes. If the UART frame is shorter than expected, the memcpy reads beyond the end of the received data buffer, causing stack or heap corruption that can be exploited for arbitrary code execution on the ESP32.

Changes

• firmware/esp32-csi-node/main/mmwave_sensor.c

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security