241 matches found
CVE-2024-24255
A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...
CVE-2024-24254: Concurrent Execution using Shared Resource with Improper Synchronization
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes...
CVE-2024-24254
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes...
CVE-2024-24255
A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...
CVE-2024-24254
CVE-2024-24254 affects PX4 Autopilot versions 1.14 and earlier. A race condition arises from the lack of synchronization when loading geofence data in geofence.cpp and mission_feasibility_checker.cpp, which can cause the drone to upload overlapping geofences and mission routes. The connected docu...
CVE-2024-24255
CVE-2024-24255 involves a race condition in PX4 Autopilot up to v1.14, affecting the geofence.cpp and mission_feasibility_checker.cpp components. The underlying issue can allow an attacker to push a drone into unintended missions. Public details in connected documents confirm the affected product...
CVE-2024-24255: Concurrent Execution using Shared Resource with Improper Synchronization
A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...
CVE-2024-24254
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes...
CVE-2024-24255
A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...
CVE-2023-47625
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
Buffer overflow
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
CVE-2023-47625
CVE-2023-47625 affects PX4 Autopilot. A global buffer overflow exists in CrsfParser_TryParseCrsfPacket (CrsfParser.cpp:298) due to an invalid size check, enabling a remote RC packet to overflow the _rcs_buf and cause the drone to behave unexpectedly. Impact: potential instability or denial of ser...
CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
PX4 Drone Autopilot Security Vulnerability
PX4 Drone Autopilot is a PX4 drone autopilot open source by PX4 Autopilot for Drones. A security vulnerability exists in PX4 autopilot versions prior to 1.14.0 that stems from the presence of a buffer overflow issue...
CVE-2023-47625: Buffer Copy without Checking Size of Input
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...
PT-2023-30521 · Px4 · Px4
Name of the Vulnerable Software and Affected Versions: PX4 autopilot versions prior to 1.14.0 Description: A global buffer overflow vulnerability exists in the CrsfParser TryParseCrsfPacket function due to an invalid size check. This allows a malicious user to create an RC packet remotely, which...
CVE-2023-46256
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...
Heap overflow
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of parserbufindex value checking. A malfunction of the sensor device can cause a heap buffer overflow...