CVE-2021-34125

CVE-2021-34125 concerns Yuneec Mantis Q and PX4-Autopilot v1.11.3 and earlier where sensitive information can be leaked via various nuttx commands. The PX4-Autopilot impact is supported by PT-2023-12246, which recommends updating PX4-Autopilot to versions above 1.11.3 to resolve the issue; for Yu...

CVE-2024-40427

CVE-2024-40427 affects PX4‑Autopilot with a stack buffer overflow in v1.14.3. The vulnerability can allow an attacker to run commands and cause the program to refuse to execute. Affected component: PX4‑Autopilot v1.14.3; root cause: stack-based overflow. Public references attest to the issue and ...

CVE-2024-38952

CVE-2024-38952 : PX4-Autopilot v1.14.3 has a buffer overflow in the logger component via the topic_name parameter in /logger/logged_topics.cpp. The CVSS 3.1 vector indicates exploitability is NETWORK, with no privileges or user interaction required, and an impact on availability only (I/N; A:H). ...

CVE-2021-46896

CVE-2021-46896 affects PX4-Autopilot. A buffer overflow in a handler function for message ID 332 can lead to denial of service. Documents consistently describe the issue as a buffer overflow in PX4-Autopilot with DoS impact; specific vulnerable versions, affected components, and a confirmed remed...

CVE-2025-15150

CVE-2025-15150 affects PX4 PX4-Autopilot up to version 1.16.0. The vulnerability resides in MavlinkLogHandler::state_listing and MavlinkLogHandler::log_entry_from_id within src/modules/mavlink/mavlink_log_handler.cpp, causing a stack-based buffer overflow. Exploitation is limited to local access....