PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

PX4 Military UAV Autopilot =1.12.3 Stack-Pufferüberlauf-Exploit CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Datum: 2025-06-21 Getestet auf: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Typ: Denial of Service DoS durch...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - Estouro de Buffer na Pilha do MavlinkLogHandler do PX4 Autopilot DoS -orange -blue 📜 Descrição CVE-2026-32743 é um estouro de buffer baseado em pilha no MavlinkLogHandler das versões ≤1.17.0-rc2 do PX4 Autopilot. O buffer LogEntry.filepath tem apenas 60 bytes , mas sscanf analisa...

CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743

CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743 CVE-2026-32743 — PX4 Autopilot Stack Buffer Overflow CTT-Enhanced: Cascata Temporale a 33 Livelli per DoS su Drone. L'exploit originale causa il crash del task MAVLink tramite un overflow di 60 byte. La versione CTT distribuisce l'overflow su 33...

CVE-2026-36522

CVE-2026-36522 حقن NaN غير مصدق عبر MAVLinkPARAMSET في ArduPilot ArduPlane | ---|--- CVE| CVE-2026-36522 CWE| CWE-1287 التحقق غير السليم من النوع المحدد للمدخل CVSS 3.1| 9.1 حرج — AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H المتأثر| ArduPilot ArduPlane 4.0.1 مؤكد المكوّن| GCSMAVLINK::handleparamset —...

Damn-Vulnerable-Drone

Damn Vulnerable Drone Il Damn Vulnerable Drone è un simulatore di hacking per droni intenzionalmente vulnerabile, basato sull'architettura popolare ArduPilot/MAVLink, che fornisce un ambiente realistico per l'hacking pratico dei droni. Indice Informazioni sul Damn Vulnerable Drone Cos'è il Damn...

PT-2026-55304

Name of the Vulnerable Software and Affected Versions ardupilot versions prior to Plane-4.6.4 Description An out-of-bounds read issue exists in the GCS MAVLINK::handle serial control function within the libraries/GCS MAVLink/GCS serial control.cpp file. An out-of-bounds read occurs when a program...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

CVE-2026-38971

ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCSMAVLink/GCSserialcontrol.cpp in GCSMAVLINK::handleserialcontrol...

Exploit for Stack-based Buffer Overflow in Dronecode Px4_Drone_Autopilot

CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer...

CVE-2026-1579

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIALCONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink...

CVE-2026-1579

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIALCONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink...

CVE-2026-1579

The CVE-2026-1579 issue affects PX4 Autopilot via the MAVLink protocol. Without MAVLink 2.0 message signing, unauthenticated entities with access to the MAVLink interface can send messages (including SERIAL_CONTROL, which can grant interactive shell access), potentially compromising devices that ...

CVE-2026-1579 PX4 Autopilot Missing authentication for critical function

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIALCONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink...

CVE-2026-1579

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIALCONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink...

CVE-2026-1579 PX4 Autopilot Missing authentication for critical function

The MAVLink communication protocol does not require cryptographic authentication by default. When MAVLink 2.0 message signing is not enabled, any message -- including SERIALCONTROL, which provides interactive shell access -- can be sent by an unauthenticated party with access to the MAVLink...

PX4 Autopilot

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with access to the MAVLink interface to execute arbitrary shell commands without cryptographic authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

PT-2026-29340

Name of the Vulnerable Software and Affected Versions PX4 Autopilot affected versions not specified Description The MAVLink communication protocol, as used by PX4 Autopilot, does not require cryptographic authentication by default. Without MAVLink 2.0 message signing enabled, unauthenticated...

PX4-Autopilot 访问控制错误漏洞

PX4-Autopilot is an open-source drone autopilot system developed by PX4. PX4-Autopilot has a security vulnerability related to access control. This vulnerability arises from the fact that encryption authentication is not required by default, and when MAVLink 2.0 message signing is not enabled, an...

CVE-2026-32709

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, An unauthenticated path traversal vulnerability in the PX4 Autopilot MAVLink FTP implementation allows any MAVLink peer to read, write, create, delete, and rename arbitrary files on the flight controller filesystem withou...

CVE-2026-32743

PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, and are triggered via MAVLink log request. The LogEntry.filepath buffer is 60 bytes, but the sscanf function parses...