Dronecode vulnerabilities

Products

• Px4 Drone Autopilot 23
• Micro Air Vehicle Link 3

Newest

• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling CVE-2026-32743 Public exploit 6.5 MediumMarch 18, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition CVE-2026-32724 5.3 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors CVE-2026-32713 4.3 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) CVE-2026-32709 5.4 MediumMarch 13, 2026
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) CVE-2026-32708 7.8 HighMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop CVE-2026-32707 Public exploit 5.2 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet CVE-2026-32706 7.1 HighMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot BST Device Name Length Can Overflow Driver Buffer CVE-2026-32705 6.8 MediumMarch 13, 2026
• dronecode px4 drone autopilot PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re... CVE-2026-26742 8.1 HighMarch 10, 2026
• dronecode px4 drone autopilot PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism... CVE-2026-26741 8.1 HighMarch 10, 2026
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow CVE-2025-15150 4.8 MediumDecember 28, 2025
• dronecode px4 drone autopilot Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to... CVE-2024-40427 7.9 HighJanuary 7, 2025
• dronecode px4 drone autopilot PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at... CVE-2024-38952 7.5 HighJune 25, 2024
• dronecode px4 drone autopilot A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS)... CVE-2024-38951 6.5 MediumJune 25, 2024
• dronecode px4 drone autopilot PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the... CVE-2024-30800 5.6 MediumApril 23, 2024
• dronecode px4 drone autopilot An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and... CVE-2024-30799 4.4 MediumApril 22, 2024
• dronecode px4 drone autopilot An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for... CVE-2024-29460 6.6 MediumApril 10, 2024
• dronecode px4 drone autopilot A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot... CVE-2024-24255 4.2 MediumFebruary 6, 2024
• dronecode px4 drone autopilot PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence... CVE-2024-24254 4.2 MediumFebruary 6, 2024
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more Global Buffer Overflow leading to denial of service in PX4-Autopilot CVE-2023-47625 2.9 LowNovember 13, 2023
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4-Autopilot Heap Buffer Overflow Bug CVE-2023-46256 4.4 MediumOctober 31, 2023
• dronecode px4 drone autopilot Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via... CVE-2021-46896 7.5 HighJuly 6, 2023
• dronecode px4 drone autopilot, yuneec mantis q firmware +1 more An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to... CVE-2021-34125 7.5 HighMarch 9, 2023
• dronecode micro air vehicle link, px4 mavlink +1 more RVD#3317: MAVLink version handshaking allows for an attacker to bypass authentication CVE-2020-10283 8.1 HighAugust 20, 2020
• dronecode micro air vehicle link, px4 mavlink +1 more RVD#3316: No authentication in MAVLink protocol CVE-2020-10282 9.8 CriticalJuly 3, 2020
• dronecode micro air vehicle link, px4 mavlink +1 more RVD#3315: Cleartext transmission of sensitive information in MAVLink protocol version 1.0 and 2.0 CVE-2020-10281 7.5 HighJuly 3, 2020