TI-2023-24883 CVE-2023-46256
PX4-Autopilot Heap Buffer Overflow Bug
Priority HIGH 75
PX4-Autopilot provides PX4 flight control solution for drones.
Dronecode
Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
Dronecode records in CISA KEVNo Dronecode vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
23 records in Px4 Drone Autopilot · all components
TI-2021-21564 CVE-2021-46896 · GHSA-82h7-455m-f9mp
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of…
Priority HIGH 72
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
TI-2021-13281 CVE-2021-34125 · GHSA-hjmv-7x32-qx8w
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow…
Priority HIGH 72
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.
TI-2026-25200 CVE-2026-32708
Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)
Priority HIGH 70
PX4 autopilot is a flight control solution for drones.
TI-2026-25198 CVE-2026-32706
PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet
Priority HIGH 68
PX4 autopilot is a flight control solution for drones.
TI-2026-21380 CVE-2026-26742 · GHSA-r53q-gcfw-q36c
PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in…
Priority HIGH 68
PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.
TI-2026-21379 CVE-2026-26741 · GHSA-hwq5-3473-h97q
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching…
Priority HIGH 68
PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism.
TI-2024-26918 CVE-2024-40427 · GHSA-w3wc-83g3-v333
Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute…
Priority HIGH 68
Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute
Priority HIGH 65
PX4 autopilot is a flight control solution for drones.
TI-2026-25201 CVE-2026-32709
PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)
Priority MEDIUM 63
PX4 autopilot is a flight control solution for drones.
TI-2026-25235 CVE-2026-32743
PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling
Priority MEDIUM 62
PX4 is an open-source autopilot stack for drones and unmanned vehicles.
TI-2026-25205 CVE-2026-32713
PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors
Priority MEDIUM 62
PX4 autopilot is a flight control solution for drones.
TI-2024-19459 CVE-2024-29460 · GHSA-36m2-fp76-fx6w
An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path…
Priority MEDIUM 62
An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.
TI-2026-25199 CVE-2026-32707
PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop
Priority MEDIUM 60
PX4 autopilot is a flight control solution for drones.
TI-2026-25216 CVE-2026-32724
PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition
Priority MEDIUM 57
PX4 autopilot is a flight control solution for drones.
TI-2025-13828 CVE-2025-15150 · GHSA-vgjw-r3pf-238c
PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow
Priority MEDIUM 55
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0.
TI-2024-16047 CVE-2024-24255 · GHSA-pxh3-hmj4-xhjv
A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4…
Priority MEDIUM 53
A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.
Priority MEDIUM 53
PX4 autopilot is a flight control solution for drones.
TI-2024-26118 CVE-2024-38952 · GHSA-pf8g-8pmm-2xcp
PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name…
Priority MEDIUM 40
PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp.
TI-2024-26117 CVE-2024-38951 · GHSA-h5ff-9jmg-gx4j
A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service…
Priority LOW 29
A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message.
TI-2024-20348 CVE-2024-30800 · GHSA-7w3j-x6f6-7ff4
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching…
Priority LOW 27
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.
TI-2024-20347 CVE-2024-30799 · GHSA-7qcm-hh75-h23f
An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary…
Priority LOW 20
An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function.
TI-2024-16046 CVE-2024-24254 · GHSA-f5rg-254c-x94v
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading…
Priority LOW 20
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp.