PX
Vendor
PX4
18
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102809 | PX PX4-Autopilot PX4 | 6.5 | Sep 29 | PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command |
| CVE-2026-102808 | PX PX4-Autopilot PX4 | 6.5 | Sep 29 | PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress |
| CVE-2026-86714 | PX PX4-Autopilot PX4 | 5.4 | Sep 8 | PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman |
| CVE-2026-86713 | PX PX4-Autopilot PX4 | 7.1 | Sep 8 | PX4 Autopilot through 1.17.0 Use-After-Free in load_mon |
| CVE-2026-86097 | PX PX4-Autopilot PX4 | 6.5 | Sep 4 | PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select |
| CVE-2026-86096 | PX PX4-Autopilot PX4 | 5.9 | Sep 4 | PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup |
| CVE-2026-84698 | PX PX4-Autopilot PX4 | 6.5 | Sep 2 | PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size |
| CVE-2026-1579 | AU Autopilot PX4 | 9.8 | Mar 31 | PX4 Autopilot Missing authentication for critical function |
| CVE-2026-32743 | PX PX4-Autopilot PX4 | 6.5 | Mar 18 | PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling |
| CVE-2026-32724 | PX PX4-Autopilot PX4 | 5.3 | Mar 13 | PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition |
| CVE-2026-32713 | PX PX4-Autopilot PX4 | 6.5 | Mar 13 | PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors |
| CVE-2026-32709 | PX PX4-Autopilot PX4 | 6.8 | Mar 13 | PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) |
| CVE-2026-32708 | PX PX4-Autopilot PX4 | 8.0 | Mar 13 | Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) |
| CVE-2026-32707 | PX PX4-Autopilot PX4 | 6.1 | Mar 13 | PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop |
| CVE-2026-32706 | PX PX4-Autopilot PX4 | 8.1 | Mar 13 | PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet |
| CVE-2026-32705 | PX PX4-Autopilot PX4 | 6.8 | Mar 13 | PX4 autopilot BST Device Name Length Can Overflow Driver Buffer |
| CVE-2025-15150 | PX PX4-Autopilot PX4 | 7.8 | Dec 28 | PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow |
| CVE-2025-9020 | PX PX4-Autopilot PX4 | 4.5 | Aug 15 | PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free |