Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-24254 EUVD-2024-21678GHSA-f5rg-254c-x94v

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability …

Published Feb 6, 2024 · Updated Jun 5, 2025 · Assigned by mitre

Description

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes.

References