CVE-2024-24254

CVE-2024-24254 affects PX4 Autopilot versions 1.14 and earlier. A race condition arises from the lack of synchronization when loading geofence data in geofence.cpp and mission_feasibility_checker.cpp, which can cause the drone to upload overlapping geofences and mission routes. The connected docu...

CVE-2023-47625

CVE-2023-47625 affects PX4 Autopilot. A global buffer overflow exists in CrsfParser_TryParseCrsfPacket (CrsfParser.cpp:298) due to an invalid size check, enabling a remote RC packet to overflow the _rcs_buf and cause the drone to behave unexpectedly. Impact: potential instability or denial of ser...

CVE-2024-24255

CVE-2024-24255 involves a race condition in PX4 Autopilot up to v1.14, affecting the geofence.cpp and mission_feasibility_checker.cpp components. The underlying issue can allow an attacker to push a drone into unintended missions. Public details in connected documents confirm the affected product...

CVE-2024-30799

The provided references indicate a vulnerability in PX4 Autopilot versions 1.14 and earlier, where the Breach Return Point function can be abused to execute arbitrary code and trigger a denial of service. Affected component: Breach Return Point handling within PX4 Autopilot. Underlying cause: not...