CVE-2024-40427

A Stack Buffer Overflow vulnerability exists in PX4-Autopilot versions prior to v1.14.3 . The root cause is a Buffer Copy without Checking Size of Input (CWE-120), which allows an attacker to execute commands to exploit the vulnerability, potentially causing the program to refuse execution. A pro...

CVE-2025-15150

CVE-2025-15150 affects PX4 PX4-Autopilot up to version 1.16.0. The vulnerability resides in MavlinkLogHandler::state_listing and MavlinkLogHandler::log_entry_from_id within src/modules/mavlink/mavlink_log_handler.cpp, causing a stack-based buffer overflow. Exploitation is limited to local access....