High severity · published Dec 28, 2025
CVE-2025-15150
PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::state_listing/MavlinkLogHandler::log_entry_from_id of the file src/modules/mavlink/mavlink_log_handler.cpp. The manipulation results in stack-based buffer overflow. The attack is only possible with local access. The patch is identified as 338595edd1d235efd885fd5e9f45e7f9dcf4013d. It is best practice to apply a patch to resolve this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PX
PX4-Autopilot · PX4
1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +11 more · source: vendor
PD
Px4 Drone Autopilot · Dronecode
through 1.16.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15150
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15150
Exploit
https://github.com/PX4/PX4-Autopilot/issues/26118
Exploit
https://github.com/PX4/PX4-Autopilot/pull/26124
Patch
https://github.com/PX4/PX4-Autopilot/pull/26124/commits/338595edd1d235efd885fd5e9f45e7f9dcf4013d
Permissions Required
https://vuldb.com/?ctiid.338527
Third Party Advisory
https://vuldb.com/?id.338527
Third Party Advisory
https://vuldb.com/?submit.717323
More from PX4-Autopilot
8.1
CVE-2026-32706
PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet
8.0
CVE-2026-32708
Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)
7.1
CVE-2026-86713
PX4 Autopilot through 1.17.0 Use-After-Free in load_mon
6.8
CVE-2026-32709
PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)
6.8
CVE-2026-32705
PX4 autopilot BST Device Name Length Can Overflow Driver Buffer