{"id":"CVE-2024-40427","aliases":["EUVD-2024-38810","GHSA-55wq-2hgm-75m4","GHSA-w3wc-83g3-v333"],"status":"published","title":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to...","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","severity":{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00349,"percentile":0.28725,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2025-01-07T00:00:00Z","modified":"2026-10-28T10:41:55Z","products":[{"vendor":"dronecode","product":"px4_drone_autopilot"}],"references":[{"url":"https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-55wq-2hgm-75m4","tags":["exploit","Exploit","Vendor Advisory","advisory"]},{"url":"https://github.com/PX4/PX4-Autopilot/commit/e03e0261a1a0c82f545e66a1e3795956c886db71","tags":["Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40427","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w3wc-83g3-v333"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40427.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-40427","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","status":"published","published":"2025-01-07T00:00:00Z","modified":"2025-01-08T18:09:23.137Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:06.811965Z"}],"euvd":[{"id":"EUVD-2024-38810","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","status":"published","published":"2025-01-07T00:00:00Z","modified":"2025-01-08T18:09:23Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:23.485796Z"}],"ghsa":[{"id":"GHSA-w3wc-83g3-v333","title":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to...","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","status":"published","published":"2025-01-07T21:30:55Z","modified":"2025-01-08T21:33:30Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:59:26.383945Z"}],"nvd":[{"id":"CVE-2024-40427","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","status":"published","published":"2025-01-07T19:15:32.26Z","modified":"2026-06-17T07:45:52.183Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:41.838321Z"}],"osv":[{"id":"CVE-2024-40427","description":"Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute","status":"published","published":"2025-01-07T00:00:00Z","modified":"2026-10-28T10:41:55.263237855Z","cvss":[{"version":"3.1","score":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:41.618074Z"}]}}