Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PX4-Autopilot — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in PX4-Autopilot, with AI-generated Chinese analysis, references, and POCs.

This page details the Common Weakness Enumeration (CWE) vulnerabilities associated with the PX4-Autopilot software developed by the PX4 Community. It aggregates a comprehensive collection of security flaws and defects identified within this open-source flight control system, covering issues reported and published from its initial releases through the present day. By centralizing this data, the page serves as a critical resource for developers, security auditors, and drone operators seeking to understand the historical and current security posture of the PX4 ecosystem. Visitors can track a vendor's advisories to stay updated on the latest patches and mitigation strategies released by the core team. Furthermore, users can understand a weakness class by examining how specific CWE types manifest within the unique context of autonomous drone navigation and hardware abstraction layers. The repository also allows you to look up a product's vulnerability history, providing insight into the evolution of security practices and the frequency of reported issues over time. This aggregation helps identify patterns in code quality and architectural weaknesses that may require immediate attention or long-term refactoring. The information is organized to facilitate efficient research and risk assessment, enabling stakeholders to make informed decisions regarding software upgrades, deployment configurations, and operational safety protocols. All data is sourced from official security disclosures and community reports to ensure accuracy and relevance for the aviation and robotics communities relying on PX4-Autopilot for critical autonomous operations.

Vendor: PX4

CVE ID Title CVSS Severity Published
CVE-2026-102809 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command CWE-789 6.5 Medium 2026-09-29
CVE-2026-102808 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress CWE-476 6.5 Medium 2026-09-29
CVE-2026-86714 PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman CWE-125 5.4 Medium 2026-09-08
CVE-2026-86713 PX4 Autopilot through 1.17.0 Use-After-Free in load_mon CWE-416 7.1 High 2026-09-08
CVE-2026-86097 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select CWE-476 6.5 Medium 2026-09-04
CVE-2026-86096 PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup CWE-416 5.9 Medium 2026-09-04
CVE-2026-84698 PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size CWE-787 6.5 Medium 2026-09-02
CVE-2026-32743 PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling CWE-121 6.5 Medium 2026-03-18
CVE-2026-32724 PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition CWE-416 5.3 Medium 2026-03-13
CVE-2026-32713 PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors CWE-670 4.3 Medium 2026-03-13
CVE-2026-32709 PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) CWE-22 5.4 Medium 2026-03-13
CVE-2026-32708 Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) CWE-121 7.8 High 2026-03-13
CVE-2026-32707 PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop CWE-121 5.2 Medium 2026-03-13
CVE-2026-32706 PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet CWE-120 7.1 High 2026-03-13
CVE-2026-32705 PX4 autopilot BST Device Name Length Can Overflow Driver Buffer CWE-121 6.8 Medium 2026-03-13
CVE-2025-15150 PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow CWE-121 5.3 Medium 2025-12-28
CVE-2025-9020 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free CWE-416 4.5 Medium 2025-08-15
CVE-2025-5640 PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow CWE-121 3.3 Low 2025-06-05
CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot CWE-120 2.9 Low 2023-11-13
CVE-2023-46256 PX4-Autopilot Heap Buffer Overflow Bug CWE-122 4.4 Medium 2023-10-31

All 20 known CVE vulnerabilities affecting PX4-Autopilot with full Chinese analysis, references, and POCs where available.