CVE-2026-38971

ArduPilot software versions prior to Plane-4.6.4 are vulnerable to an out-of-bounds read issue. The flaw is located in the libraries/GCS_MAVLink/GCS_serial_control.cpp file within the GCS_MAVLINK::handle_serial_control() function. This vulnerability occurs when the program reads data beyond the i...