CVE-2025-71409

The CVE-2025-71409 entry describes a lack of authentication for Very High Frequency Data Link CPDLC messages, allowing rogue ground stations to inject messages remotely over radio frequency. The root cause is missing auth for VHF Datalink CPDLC, which can lead to unexpected or misleading clearanc...

CVE-2025-71409

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71409 No Authentication for Very High Frequency Data Link messages used in CPDLC

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

EUVD-2025-210653

Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...

CVE-2025-71413 In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71410: Allocation of Resources Without Limits or Throttling

Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...

CVE-2025-71409: Missing Authentication for Critical Function

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71413: Improper Check for Unusual or Exceptional Conditions

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency...

multimon-ng 格式化字符串错误漏洞

multimon-ng is a library from the personal developer Elias Önal. It can decode various digital transmission modes commonly found on VHF/UHF radios. A format string error vulnerability exists in multimon-ng, which stems from a problem with the function addch in the file demodflex.c, where...

CVE-2022-24700

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service daemon crash via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by...