Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

CVE-2026-36522

CVE-2026-36522 Unauthenticated NaN Injection via MAVLinkPARAMSET in ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 Improper Validation of Specified Type of Input CVSS 3.1| 9.1 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected| ArduPilot ArduPlane 4.0.1 confirmed Component|...

Mission (Im)Possible: Towards Autonomous Discovery of Autopilot Logic Flaws in Open-Source Drone Frameworks

Autonomous drones are increasingly deployed in safety-critical tasks, yet their autopilot software can still contain subtle logic flaws that lead to unsafe behaviors. These flaws are difficult to discover with existing techniques because they often depend on semantic relationships across modules,...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +22 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2026-59890 via setuptools (76.0.0)

setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...

arbor-ai (0.2.17), ardupilot-methodic-configurator (>=1.4.3, <=1.4.4) +8 more potentially affected by CVE-2026-59890 via setuptools (79.0.0)

setuptools PYPI version 79.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - arbor-ai 0.2.17 - ardupilot-methodic-configurator =1.4.3, =0.0.1, =1.0.6, =0.1.0, =20250422.0.0.dev0, =20250430.0.0.dev0 -...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +22 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971: Out-of-bounds Read

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ArduPilot software versions prior to Plane-4.6.4 are vulnerable to an out-of-bounds read issue. The flaw is located in the libraries/GCS_MAVLink/GCS_serial_control.cpp file within the GCS_MAVLINK::handle_serial_control() function. This vulnerability occurs when the program reads data beyond the i...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

PT-2026-55304

Name of the Vulnerable Software and Affected Versions ardupilot versions prior to Plane-4.6.4 Description An out-of-bounds read issue exists in the GCS MAVLINK::handle serial control function within the libraries/GCS MAVLink/GCS serial control.cpp file. An out-of-bounds read occurs when a program...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...

CVE-2024-51395

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APSmartAudio::loop, APSmartAudio, APSmartAudio.cpp components...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...

CVE-2024-51394

Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the APMSP::loop, APMSP, APMSP.cpp components...