Skip to content
OpenAdvisories

Vendor

PX4

21 known vulnerabilities.

Products

PX4-Autopilot 19 MAVLink 1 Autopilot 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-32743 Public exploit

    PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling

    PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, and are triggered via MAVLink log request. The LogEntry.filepath buffer is 60 by…

    PX4 PX4-Autopilot
  • Medium 5.2
    CVE-2026-32707 Public exploit

    PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop

    PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu_can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattu_can is enabl…

    PX4 PX4-Autopilot