Skip to contentPx4 Px4-autopilot vulnerabilities
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 CommandCVE-2026-1028097.1 High
- px4 px4-autopilotPX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stressCVE-2026-1028087.1 High
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Stack Buffer Over-read via netmanCVE-2026-867145.3 Medium
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Use-After-Free in load_monCVE-2026-867137.1 High
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Null Pointer Dereference via param selectCVE-2026-860977.1 High
- px4 px4-autopilotPX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task StartupCVE-2026-860966.0 Medium
- px4 px4-autopilotPX4 Autopilot sd_bench Heap Buffer Overflow via Block SizeCVE-2026-846987.1 High
- px4 px4-autopilot, dronecode px4 drone autopilot +1 morePX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request HandlingCVE-2026-32743Public exploit6.5 Medium
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race ConditionCVE-2026-327245.3 Medium
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File DescriptorsCVE-2026-327134.3 Medium
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)CVE-2026-327095.4 Medium
- px4 px4-autopilot, dronecode px4 drone autopilot +1 moreZenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)CVE-2026-327087.8 High
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loopCVE-2026-32707Public exploit5.2 Medium
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packetCVE-2026-327067.1 High
- dronecode px4 drone autopilot, px4 px4-autopilot +1 morePX4 autopilot BST Device Name Length Can Overflow Driver BufferCVE-2026-327056.8 Medium
- px4 px4-autopilot, dronecode px4 drone autopilot +1 morePX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflowCVE-2025-151504.8 Medium
- px4 px4-autopilotPX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after freeCVE-2025-90202.0 Low
- px4 px4-autopilotPX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflowCVE-2025-5640Public exploit4.8 Medium
- px4 px4-autopilot, dronecode px4 drone autopilot +1 moreGlobal Buffer Overflow leading to denial of service in PX4-AutopilotCVE-2023-476252.9 Low
- px4 px4-autopilot, dronecode px4 drone autopilot +1 morePX4-Autopilot Heap Buffer Overflow BugCVE-2023-462564.4 Medium