Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

CVE-2026-36522

CVE-2026-36522 Unauthenticated NaN Injection via MAVLinkPARAMSET in ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 Improper Validation of Specified Type of Input CVSS 3.1| 9.1 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected| ArduPilot ArduPlane 4.0.1 confirmed Component|...

ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2026-59890 via setuptools (76.0.0)

setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971: Out-of-bounds Read

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

PT-2026-55304

Name of the Vulnerable Software and Affected Versions ardupilot versions prior to Plane-4.6.4 Description An out-of-bounds read issue exists in the GCS MAVLINK::handle serial control function within the libraries/GCS MAVLink/GCS serial control.cpp file. An out-of-bounds read occurs when a program...

CVE-2026-38971

ArduPilot software versions prior to Plane-4.6.4 are vulnerable to an out-of-bounds read issue. The flaw is located in the libraries/GCS_MAVLink/GCS_serial_control.cpp file within the GCS_MAVLINK::handle_serial_control() function. This vulnerability occurs when the program reads data beyond the i...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...

CVE-2024-51394

A buffer overflow vulnerability exists in the ArduPilot Project (Ardupiot Copter) software, specifically within the AP_MSP::loop , AP_MSP , and AP_MSP.cpp components. This flaw is present in the Latest commit 92693e023793133e49a035daf37c14433e484778 . A local attacker can exploit this vulnerabili...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...