Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PX4-Autopilot Heap Buffer Overflow Bug
Vulnerability Description
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value checking. A malfunction of the sensor device can cause a heap buffer overflow with leading unexpected drone behavior. Malicious applications can exploit the vulnerability even if device sensor malfunction does not occur. Up to the maximum value of an `unsigned int`, bytes sized data can be written to the heap memory area. As of time of publication, no fixed version is available.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:L
Vulnerability Type
堆缓冲区溢出
Vulnerability Title
PX4 Drone Autopilot 安全漏洞
Vulnerability Description
PX4 Drone Autopilot是PX4 Autopilot for Drones开源的一个 PX4 无人机自动驾驶仪。 PX4 Drone Autopilot 1.14.0-rc1及之前版本存在安全漏洞，该漏洞源于缺少对parserbuf_index值的检查，导致存在缓冲区溢出漏洞。
CVSS Information
N/A
Vulnerability Type
N/A