PX
Product
PX4-Autopilot
17
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 13Low 0
Watch
Add PX4-Autopilot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32709 | 6.8 | Mar 13 | PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) Affected: < 1.17.0-rc2 |
| CVE-2026-32705 | 6.8 | Mar 13 | PX4 autopilot BST Device Name Length Can Overflow Driver Buffer Affected: < 1.17.0-rc2 |
| CVE-2026-102809 | 6.5 | Sep 29 | PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command Affected: through 1.17.0 |
| CVE-2026-102808 | 6.5 | Sep 29 | PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress Affected: through 1.17.0 |
| CVE-2026-86097 | 6.5 | Sep 4 | PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select Affected: through 1.17.0 |
| CVE-2026-84698 | 6.5 | Sep 2 | PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size Affected: through 1.17.0 |
| CVE-2026-32743 | 6.5 | Mar 18 | PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling Affected: <= 1.17.0-rc2 |
| CVE-2026-32713 | 6.5 | Mar 13 | PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors Affected: < 1.17.0-rc2 |
| CVE-2026-32707 | 6.1 | Mar 13 | PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop Affected: < 1.17.0-rc2 |
| CVE-2026-86096 | 5.9 | Sep 4 | PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup Affected: through 1.17.0 |
| CVE-2026-86714 | 5.4 | Sep 8 | PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman Affected: through 1.17.0 |
| CVE-2026-32724 | 5.3 | Mar 13 | PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition Affected: < 1.17.0-rc1 |
| CVE-2025-9020 | 4.5 | Aug 15 | PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free Affected: 1.15.0; 1.15.1; 1.15.2; 1.15.3; 1.15.4 |
Showing 13