PD
Product
Px4 Drone Autopilot
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 13Low 0
Watch
Add Px4 Drone Autopilot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32706 | 8.1 | Mar 13 | PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet Affected: before 1.17.0; 1.17.0; 1.17.0; 1.17.0 |
| CVE-2026-26742 | 8.1 | Mar 10 | PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic Affected: 1.12.0 before 1.16.0 |
| CVE-2026-26741 | 8.1 | Mar 10 | PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism Affected: 1.12.0 before 1.16.0 |
| CVE-2026-32708 | 8.0 | Mar 13 | Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) Affected: before 1.17.0; 1.17.0; 1.17.0; 1.17.0 |
| CVE-2024-40427 | 7.9 | Jan 7 | Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute Affected: before 1.14.3 |
| CVE-2025-15150 | 7.8 | Dec 28 | PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow Affected: through 1.16.0 |
| CVE-2024-38952 | 7.5 | Jun 25 | PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp Affected: 1.14.3 |
| CVE-2021-46896 | 7.5 | Jul 6 | Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332 Affected: All versions, or not specified |
| CVE-2021-34125 | 7.5 | Mar 9 | An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands Affected: through 1.11.3 |
Showing 9
