OpenDroneID OSM Security Vulnerability

OpenDroneID OSM is a project to provide low-cost and reliable beaconing capabilities for UAVs so that they can be recognized when within range of a receiver. A security vulnerability exists in OpenDroneID OSM version 3.5.1. Attackers use the vulnerability to impersonate other drones by transmitti...

CVE-2024-24255

A Race Condition discovered in geofence.cpp and missionfeasibilitychecker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions...

CVE-2023-50121

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service DoS...

Design/Logic Flaw

Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service DoS...

CVE-2023-50121

CVE-2023-50121 affects the Autel EVO NANO drone flight control firmware, specifically version 1.6.5. The available documents state a denial of service (DoS) vulnerability but do not provide concrete details on the root cause, vulnerable function/file, or affected hardware variants beyond this fir...

PT-2024-13861 · Autel · Autel Evo Nano Drone Flight Control Firmware

Name of the Vulnerable Software and Affected Versions: Autel EVO NANO drone flight control firmware version 1.6.5 Description: The issue is related to a denial of service DoS in the Autel EVO NANO drone flight control firmware. No information is provided about the estimated number of potentially...

Anduril’s New Drone Killer Is Locked on to AI-Powered Warfare

Autonomous drones are rapidly changing combat. Anduril’s new one aims to gain an edge with jet power and AI...

PT-2023-30421 · Autel Robotics · Autel Robotics Evo Nano

Name of the Vulnerable Software and Affected Versions: Autel Robotics EVO Nano drone version 1.6.5 Description: The issue concerns insecure permissions in the setNFZEnable function, allowing attackers to breach the geo-fence and fly into no-fly zones. Recommendations: For Autel Robotics EVO Nano...

CVE-2023-47335

Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones...

CVE-2023-47335

CVE-2023-47335 affects Autel Robotics EVO Nano drone v1.6.5. The issue is in the setNFZEnable function, where insecure permissions could allow bypassing the geo-fence and entering no-fly zones. Root cause: insecure permissions in the function. Potential impact: breach of restricted airspace as de...

CVE-2023-47625

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

Buffer overflow

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParserTryParseCrsfPacket function in /src/drivers/rc/crsfrc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 drone autopilot open source by PX4 Autopilot for Drones. A security vulnerability exists in PX4 autopilot versions prior to 1.14.0 that stems from the presence of a buffer overflow issue...

CVE-2023-46256

CVE-2023-46256 affects PX4-Autopilot (versions 1.14.0-rc1 and prior). The vulnerability is a heap buffer overflow in the parser function caused by missing validation of the parserbuf_index, allowing writes up to the maximum unsigned int to heap memory. This can lead to unexpected drone behavior, ...

The Future of Drone Warfare

Ukraine is using $400 drones to destroy tanks: Facing an enemy with superior numbers of troops and armor, the Ukrainian defenders are holding on with the help of tiny drones flown by operators like Firsov that, for a few hundred dollars, can deliver an explosive charge capable of destroying a...

PT-2023-29936 · Unknown · Px4-Autopilot

Name of the Vulnerable Software and Affected Versions: PX4-Autopilot versions 1.14.0-rc1 and prior Description: The issue is related to a heap buffer overflow vulnerability in the parser function of PX4-Autopilot due to the absence of parserbuf index value checking. This can cause unexpected dron...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 Drone Autopilot for Drones open source. A security vulnerability exists in PX4 Drone Autopilot 1.14.0-rc1 and earlier versions, which stems from a lack of checking of the parserbufindex value, resulting in a buffer overflow vulnerability...

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or Unmanned Aerial Vehicles UAVs have been an integral tool used by the Ukrainian military, malware-lace...

Axon's Ethics Board Resigned Over Taser-Armed Drones. Then the Company Bought a Military Drone Maker

The CEO’s vision for Taser-equipped drones includes a fictitious scenario in which the technology averts a shooting at a day care center...