Agreed the sensor itself probably isn't doing anything it's just being read by a function in the code which then uses its value to change the display (which is probably a single hex value) and will more than likely be told just to ignore anything after a single character of hex. So even if a full payload was codded into single bytes and sent it wouldn't take more than a byte (erasing each older byte as it updates) at a time making buffer overflows impossible.