CVE-2024-29460

CVE-2024-29460 affects PX4 Autopilot v1.14.0, specifically the mission_block.cpp component. The issue enables an attacker with local access to manipulate the flight path via the home point, potentially causing a drone crash. Multiple connected sources (NVD, Red Hat) corroborate that the vulnerabi...

CVE-2024-30800

CVE-2024-30800 affects PX4 Autopilot v1.14, where flaws in the geofence function can allow breaching geofence and flying into no‑fly zones. Documents consistently cite the geofence-related flaw as the root cause. Attack vector is local with high privileges/UI requirement per CVSS, and impact incl...

CVE-2024-24254

CVE-2024-24254 affects PX4 Autopilot versions 1.14 and earlier. A race condition arises from the lack of synchronization when loading geofence data in geofence.cpp and mission_feasibility_checker.cpp, which can cause the drone to upload overlapping geofences and mission routes. The connected docu...

CVE-2024-38951

CVE-2024-38951 describes a buffer overflow in PX4-Autopilot v1.12.3 that allows an attacker to cause a Denial of Service via a crafted MavLink message. The Red Hat/NVD/OSV entries confirm the same description; PT-Security suggests a temporary mitigation: disable handling of MavLink messages until...

CVE-2024-24255

CVE-2024-24255 involves a race condition in PX4 Autopilot up to v1.14, affecting the geofence.cpp and mission_feasibility_checker.cpp components. The underlying issue can allow an attacker to push a drone into unintended missions. Public details in connected documents confirm the affected product...

CVE-2024-30799

The provided references indicate a vulnerability in PX4 Autopilot versions 1.14 and earlier, where the Breach Return Point function can be abused to execute arbitrary code and trigger a denial of service. Affected component: Breach Return Point handling within PX4 Autopilot. Underlying cause: not...

CVE-2024-38952

CVE-2024-38952 : PX4-Autopilot v1.14.3 has a buffer overflow in the logger component via the topic_name parameter in /logger/logged_topics.cpp. The CVSS 3.1 vector indicates exploitability is NETWORK, with no privileges or user interaction required, and an impact on availability only (I/N; A:H). ...