CVE-2026-38971

The ardupilot flight controller software, in versions prior to Plane-4.6.4 , is susceptible to an out-of-bounds read vulnerability. The flaw is located within the libraries/GCS_MAVLink/GCS_serial_control.cpp file, specifically inside the GCS_MAVLINK::handle_serial_control() function. This issue o...