PX4 PX4-Autopilot

• CVE-2026-102809 Medium 6.5 PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command 0.5%
• CVE-2026-102808 Medium 6.5 PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress 0.2%
• CVE-2026-86714 Medium 5.4 PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman 0.3%
• CVE-2026-86713 High 7.1 PX4 Autopilot through 1.17.0 Use-After-Free in load_mon 0.4%
• CVE-2026-86097 Medium 6.5 PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select 0.4%
• CVE-2026-86096 Medium 5.9 PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup 0.3%
• CVE-2026-84698 Medium 6.5 PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size 0.4%
• CVE-2026-32743 Medium 6.5 PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling 0.4%
• CVE-2026-32724 Medium 5.3 PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition 0.2%
• CVE-2026-32713 Medium 4.3 PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors 0.4%
• CVE-2026-32709 Medium 5.4 PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) 0.5%
• CVE-2026-32708 High 7.8 Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) 0.2%
• CVE-2026-32707 Medium 5.2 PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop 0.3%
• CVE-2026-32706 High 7.1 PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet 0.3%
• CVE-2026-32705 Medium 6.8 PX4 autopilot BST Device Name Length Can Overflow Driver Buffer 0.3%
• CVE-2025-15150 Medium 5.3 PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow 0.2%
• CVE-2025-9020 Medium 4.5 PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free 0.2%
• CVE-2023-47625 Low 2.9 Global Buffer Overflow leading to denial of service in PX4-Autopilot 0.5%
• CVE-2023-46256 Medium 4.4 PX4-Autopilot Heap Buffer Overflow Bug 0.7%