“Windows XP is easier to exploit in this instance due to a lack of ASLR.”
A malicious radio packet, sent over the air, gets a reverse shell on a Windows PC running WinAPRS. The software hasn’t been updated since 2013 and will likely stay unpatched. There is no firewall in front of an antenna. Anyone still running it on an internet-connected PC has a remote hole that works without the internet.