DR
Vendor
Dronecode
26
CVEs
0
On KEV
0
New 30D
Products
PD9.8
Px4 Drone Autopilot
Dronecode
23 CVEs0 on KEV0 new
MA9.8
Micro Air Vehicle Link
Dronecode
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-32743 | PD Px4 Drone Autopilot Dronecode | 6.5 | Mar 18 | PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling |
| CVE-2026-32724 | PD Px4 Drone Autopilot Dronecode | 5.3 | Mar 13 | PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition |
| CVE-2026-32713 | PD Px4 Drone Autopilot Dronecode | 6.5 | Mar 13 | PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors |
| CVE-2026-32709 | PD Px4 Drone Autopilot Dronecode | 6.8 | Mar 13 | PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) |
| CVE-2026-32708 | PD Px4 Drone Autopilot Dronecode | 8.0 | Mar 13 | Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) |
| CVE-2026-32707 | PD Px4 Drone Autopilot Dronecode | 6.1 | Mar 13 | PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop |
| CVE-2026-32706 | PD Px4 Drone Autopilot Dronecode | 8.1 | Mar 13 | PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet |
| CVE-2026-32705 | PD Px4 Drone Autopilot Dronecode | 6.8 | Mar 13 | PX4 autopilot BST Device Name Length Can Overflow Driver Buffer |
| CVE-2026-26742 | PD Px4 Drone Autopilot Dronecode | 8.1 | Mar 10 | PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic |
| CVE-2026-26741 | PD Px4 Drone Autopilot Dronecode | 8.1 | Mar 10 | PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism |
| CVE-2025-15150 | PD Px4 Drone Autopilot Dronecode | 7.8 | Dec 28 | PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow |
| CVE-2024-40427 | PD Px4 Drone Autopilot Dronecode | 7.9 | Jan 7 | Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute |
| CVE-2024-38952 | PD Px4 Drone Autopilot Dronecode | 7.5 | Jun 25 | PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp |
| CVE-2024-38951 | PD Px4 Drone Autopilot Dronecode | 6.5 | Jun 25 | A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message |
| CVE-2024-30800 | PD Px4 Drone Autopilot Dronecode | 5.6 | Apr 23 | PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function |
| CVE-2024-30799 | PD Px4 Drone Autopilot Dronecode | 4.4 | Apr 22 | An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function |
| CVE-2024-29460 | PD Px4 Drone Autopilot Dronecode | 6.6 | Apr 10 | An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp… |
| CVE-2024-24255 | PD Px4 Drone Autopilot Dronecode | 4.2 | Feb 6 | A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions |
| CVE-2024-24254 | PD Px4 Drone Autopilot Dronecode | 4.2 | Feb 6 | PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and… |
| CVE-2023-47625 | PD Px4 Drone Autopilot Dronecode | 4.3 | Nov 13 | PX4 autopilot is a flight control solution for drones |
| CVE-2023-46256 | PD Px4 Drone Autopilot Dronecode | 9.8 | Oct 31 | PX4-Autopilot provides PX4 flight control solution for drones |
| CVE-2021-46896 | PD Px4 Drone Autopilot Dronecode | 7.5 | Jul 6 | Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332 |
| CVE-2021-34125 | PD Px4 Drone Autopilot Dronecode | 7.5 | Mar 9 | An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands |
| CVE-2020-10283 | MA Micro Air Vehicle Link Dronecode | 9.8 | Aug 20 | The Micro Air Vehicle Link (MAVLink) protocol presents authentication mechanisms on its version 2.0 however according to its documentation, in order to maintain backwards… |
| CVE-2020-10282 | MA Micro Air Vehicle Link Dronecode | 9.8 | Jul 3 | The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity… |
| CVE-2020-10281 | MA Micro Air Vehicle Link Dronecode | 7.5 | Jul 3 | This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has access to the… |