257 matches found
PX4-Autopilot
The autopilot stack the industry builds on. About PX4 is an open-source autopilot stack for drones and unmanned vehicles. It supports multirotors, fixed-wing, VTOL, rovers, and many more experimental platforms from racing quads to industrial survey aircraft. It runs on NuttX, Linux, and macOS...
PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-
PX4 Military UAV Autopilot =1.12.3 Stack Buffer Overflow Exploit CVE-2025-5640 Author: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-06-21 Tested on: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Type: Denial of Service DoS via Stack Buffer...
CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-
CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS -orange -blue π Description CVE-2026-32743 is a stackβbased buffer overflow in the MavlinkLogHandler of PX4 Autopilot versions β€1.17.0-rc2. The LogEntry.filepath buffer is only 60 bytes , but sscanf parses log directory...
CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-
-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ β β β βββββββ ββββββ ββββ ββββββ βββ ββββββ ββββ βββββββββββββββββββ β β βββββββββββββββββββββ βββββββ βββββββββββββββββ...
CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743
CTT-Enhanced-PX4-Autopilot-Exploit-CVE-2026-32743 CVE-2026-32743 β PX4 Autopilot Stack Buffer Overflow CTT-Enhanced: 33-Layer Temporal Cascade Drone DoS .The original exploit crashes the MAVLink task via a 60-byte overflow. The CTT version distributes the overflow across 33 temporal layers, each...
CVE-2026-102808
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102809
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...
CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...
CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...
CVE-2026-102809
PX4 Autopilot versions through 1.17.0 are vulnerable to a stack exhaustion vulnerability within the file2 test command. The root cause is a failure to validate the write chunk size parameter , allowing an attacker with shell access to provide an excessively large value to the -c option . This act...
CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...
EUVD-2026-89109
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...
EUVD-2026-89108
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102808
PX4 Autopilot versions through 1.17.0 are vulnerable to a NULL pointer dereference within the sd_stress command. The root cause is the lack of validation for the -b byte count parameter before it is processed by malloc() and memset(). An attacker with shell access, which can be obtained via MAVLi...
PT-2026-102777
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd stress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
CVE-2026-102808: NULL Pointer Dereference
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sdstress command where the -b byte count parameter is parsed without validation before being passed to malloc and memset. Attackers with shell access, including through MAVLink, can supply invalid byte count...
PT-2026-102778
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...