162 matches found
CVE-2026-26741
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" state after landing and before the automatic disarm triggered by the COMDISARMLAND parameter, the system lacks a thrott...
CVE-2026-26741
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from Auto mode to Manual mode while the drone is in the "ARMED" state after landing and before the automatic disarm triggered by the COMDISARMLAND parameter, the system lacks a thrott...
CVE-2026-26742
PX4 Autopilot versions 1.12.xâ1.15.x have a protection mechanism failure in the Re-arm Grace Period logic. The system applies the in-air emergency re-arm logic to ground scenarios; if a pilot switches to Manual mode and re-arms within 5 seconds of an automatic landing, pre-flight safety checks (i...
CVE-2025-15150
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::statelisting/MavlinkLogHandler::logentryfromid of the file src/modules/mavlink/mavlinkloghandler.cpp. The manipulation results in stack-based buffer overflow. The attack is only...
CVE-2025-15150
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::statelisting/MavlinkLogHandler::logentryfromid of the file src/modules/mavlink/mavlinkloghandler.cpp. The manipulation results in stack-based buffer overflow. The attack is only...
CVE-2025-15150
CVE-2025-15150 affects PX4 PX4-Autopilot up to version 1.16.0. The vulnerability resides in MavlinkLogHandler::state_listing and MavlinkLogHandler::log_entry_from_id within src/modules/mavlink/mavlink_log_handler.cpp, causing a stack-based buffer overflow. Exploitation is limited to local access....
PT-2025-53665
Name of the Vulnerable Software and Affected Versions PX4 PX4-Autopilot versions up to 1.16.0 Description A stack-based buffer overflow exists in the Log Handler module of PX4 PX4-Autopilot. The issue is located in the MavlinkLogHandler::state listing/MavlinkLogHandler::log entry from id function...
đ PX4 Military UAV Autopilot 1.12.3 Denial of Service
This proof of concept exploits a stack-based buffer overflow vulnerability in PX4 Military UAV Autopilot versions up to 1.12.3, allowing an attacker to send a poorly formatted MAVLink message that causes a denial of service condition...
EUVD-2021-20788
Malware in sbrugna...
EUVD-2025-16967
Malicious code in bioql PyPI...
EUVD-2023-51733
Malicious code in bioql PyPI...
EUVD-2024-21678
Malicious code in bioql PyPI...
EUVD-2021-33546
Malicious code in bioql PyPI...
EUVD-2024-21679
Malicious code in bioql PyPI...
EUVD-2023-50483
Malicious code in bioql PyPI...
CVE-2025-9020
A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...
CVE-2025-9020 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free
A vulnerability was found in PX4 PX4-Autopilot up to 1.15.4. This issue affects the function MavlinkReceiver::handlemessageserialcontrol of the file src/modules/mavlink/mavlinkreceiver.cpp of the component Mavlink Shell Closing Handler. The manipulation of the argument mavlinkshell leads to use...
đ PX4 Military UAV Autopilot 1.12.3 Denial of Service
A stack-based buffer overflow vulnerability in PX4 Military UAV Autopilot versions 1.12.3 and below is triggered when handling a malformed MAVLink message of type TRAJECTORYREPRESENTATIONWAYPOINTS. An attacker with access to the MAVLink communication channel can send a crafted packet to crash the...
CVE-2025-5640
A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handlemessagetrajectoryrepresentationwaypoints of the file mavlinkreceiver.cpp of the component TRAJECTORYREPRESENTATIONWAYPOINTS Message Handler. The manipulation...
CVE-2025-5640
A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handlemessagetrajectoryrepresentationwaypoints of the file mavlinkreceiver.cpp of the component TRAJECTORYREPRESENTATIONWAYPOINTS Message Handler. The manipulation...