

I wish I did. :(
I’ve never heard anything about this. In fact, I’ve never heard of overlays on CoMaps generally. My only guess is that maybe the rumor is related to OsmAnd, which does let you create custom overlays given a URL source.
I only use CoMaps on desktop, which is to say not very often, so I’m a lot less familiar with it. Sorry!


Hot take: botched disclosures like this should open a company to criminal liability. We need to start treating SWE with the same level of scrutiny we do other engineering fields and not “oopsie poopsie, I accidentally just disclosed an attack that endangers global infrastructure.”
Edit: Also, just of fucking course it’s a buffer overflow in C code. “No way to prevent this, says only nation where this regularly happens” vibes.