CVE-2024-29460

The PX4 Autopilot system version v.1.14.0 contains a vulnerability in the mission_block.cpp component caused by improper handling of values (CWE-229). An attacker can exploit this issue to manipulate the drone's flight path by altering the home point location , which could lead to a physical cras...

CVE-2024-30800

The PX4 Autopilot software, specifically version 1.14 , contains a security vulnerability that allows an attacker to breach the geofence functionality. By exploiting flaws in the geofence function, an attacker can fly a drone into designated no-fly zones . To mitigate this risk, it is recommended...

CVE-2024-24254

CVE-2024-24254 affects PX4 Autopilot versions 1.14 and earlier. A race condition arises from the lack of synchronization when loading geofence data in geofence.cpp and mission_feasibility_checker.cpp, which can cause the drone to upload overlapping geofences and mission routes. The connected docu...

CVE-2024-24255

CVE-2024-24255 involves a race condition in PX4 Autopilot up to v1.14, affecting the geofence.cpp and mission_feasibility_checker.cpp components. The underlying issue can allow an attacker to push a drone into unintended missions. Public details in connected documents confirm the affected product...

CVE-2024-30799

The provided references indicate a vulnerability in PX4 Autopilot versions 1.14 and earlier, where the Breach Return Point function can be abused to execute arbitrary code and trigger a denial of service. Affected component: Breach Return Point handling within PX4 Autopilot. Underlying cause: not...

CVE-2024-38951

A buffer overflow vulnerability exists in PX4-Autopilot v1.12.3 due to a buffer copy operation that fails to check the size of the input. This flaw allows an attacker to trigger a Denial of Service (DoS) by sending a specially crafted MavLink message . To mitigate this risk, it is recommended to ...

CVE-2024-38952

The PX4-Autopilot software, specifically version v1.14.3 , is vulnerable to a buffer overflow due to a failure to check the size of input during a buffer copy operation. This issue occurs via the topic_name parameter within the /logger/logged_topics.cpp API endpoint. Potential impact includes hig...