Description
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 shell to trigger the crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PX4 | PX4-Autopilot | ≤ 1.17.0 | — |
References
- Fix Pull Request patch issue-tracking
- Patch Commit patch
- https://github.com/PX4/PX4-Autopilot product
- param_set_default_file()/param_set_backup_file() unguarded strcmp, v1.17.0 technical-description
- VulnCheck Advisory: PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select third-party-advisory