fix: in nvm_gd32 in nvm_gd32.cpp

[orbisai0security]

Summary

Fix critical severity security issue in libraries/NeVerMind/gd32/nvm_gd32.cpp.

Vulnerability

Field	Value
ID	V-001
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-001
File	libraries/NeVerMind/gd32/nvm_gd32.cpp:70

Description: In nvm_gd32.cpp at line 70, memcpy(data, adr, size) copies 'size' bytes from the source address 'adr' into the destination buffer 'data' without first validating that 'size' does not exceed the capacity of the destination buffer. In embedded firmware, NVM (non-volatile memory) content can be influenced by an attacker through a crafted firmware update, a malicious NVM image, or corruption of peripheral input. An oversized 'size' value causes the memcpy to write beyond the destination buffer boundary, overwriting adjacent stack memory including return addresses and function pointers.

Changes

• libraries/NeVerMind/gd32/nvm_gd32.cpp

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security