CVE-2026-32743
🗓️ 18 Mar 2026 23:26:51Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 120 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Exploit for Stack-based Buffer Overflow in Dronecode Px4_Drone_Autopilot | 8 May 202618:11 | – | githubexploit |
| Exploit for Stack-based Buffer Overflow in Dronecode Px4_Drone_Autopilot | 8 May 202617:08 | – | githubexploit |
 | CVE-2026-32743 | 18 Mar 202623:26 | – | attackerkb |
 | CVE-2026-32743 | 8 May 202621:00 | – | circl |
 | PX4-Autopilot security vulnerabilities | 19 Mar 202600:00 | – | cnnvd |
 | CVE-2026-32743 PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling | 18 Mar 202623:26 | – | cvelist |
 | EUVD-2026-13003 | 18 Mar 202623:26 | – | euvd |
 | CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS- | 31 Oct 202603:18 | – | kitploit |
| CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743 | 31 Oct 202603:48 | – | kitploit |
 | CVE-2026-32743 | 18 Mar 202623:26 | – | mend |
10
Node
OR
[
{
"vendor": "PX4",
"product": "PX4-Autopilot",
"versions": [
{
"version": "<= 1.17.0-rc2",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| command 261 | path | MAV_CMD_REQUEST_LOG_LIST | Triggering MAV_CMD_REQUEST_LOG_LIST (command 261) causes the MavlinkLogHandler to read log directory paths into a 60-byte buffer without a width specifier, leading to a stack-based buffer overflow. | CWE-121 |
| path = "/fs/microsd/log/" + "A"*70 | path | MAVLink FTP: OpenFile | Using MAVLink FTP to create a deeply nested directory with a path length exceeding 60 bytes sets up the condition for the buffer overflow when the log list is subsequently requested. | CWE-121 |
| flags=O_CREAT|O_DIRECTORY | path | MAVLink FTP: OpenFile | Using MAVLink FTP to create a deeply nested directory with a path length exceeding 60 bytes sets up the condition for the buffer overflow when the log list is subsequently requested. | CWE-121 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:36Current
6Medium risk
Vulners AI Score6
CVSS 3.16.5
EPSS0.00383
SSVC