Px4 Autopilot vulnerabilities

• px4 px4-autopilot PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command CVE-2026-102809 7.1 HighSeptember 29, 2026
• px4 px4-autopilot PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress CVE-2026-102808 7.1 HighSeptember 29, 2026
• px4 px4-autopilot PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman CVE-2026-86714 5.3 MediumSeptember 8, 2026
• px4 px4-autopilot PX4 Autopilot through 1.17.0 Use-After-Free in load_mon CVE-2026-86713 7.1 HighSeptember 8, 2026
• px4 px4-autopilot PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select CVE-2026-86097 7.1 HighSeptember 4, 2026
• px4 px4-autopilot PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup CVE-2026-86096 6.0 MediumSeptember 4, 2026
• px4 px4-autopilot PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size CVE-2026-84698 7.1 HighSeptember 2, 2026
• px4 autopilot PX4 Autopilot Missing authentication for critical function CVE-2026-1579 9.3 CriticalMarch 31, 2026
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling CVE-2026-32743 Public exploit 6.5 MediumMarch 18, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition CVE-2026-32724 5.3 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors CVE-2026-32713 4.3 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) CVE-2026-32709 5.4 MediumMarch 13, 2026
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) CVE-2026-32708 7.8 HighMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop CVE-2026-32707 Public exploit 5.2 MediumMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet CVE-2026-32706 7.1 HighMarch 13, 2026
• dronecode px4 drone autopilot, px4 px4-autopilot +1 more PX4 autopilot BST Device Name Length Can Overflow Driver Buffer CVE-2026-32705 6.8 MediumMarch 13, 2026
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow CVE-2025-15150 4.8 MediumDecember 28, 2025
• px4 px4-autopilot PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free CVE-2025-9020 2.0 LowAugust 15, 2025
• px4 px4-autopilot PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow CVE-2025-5640 Public exploit 4.8 MediumJune 5, 2025
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more Global Buffer Overflow leading to denial of service in PX4-Autopilot CVE-2023-47625 2.9 LowNovember 13, 2023
• px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4-Autopilot Heap Buffer Overflow Bug CVE-2023-46256 4.4 MediumOctober 31, 2023