What’s Vulnerable › Products

PX4-Autopilot vulnerabilities

31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.

Check whether your PX4-Autopilot version is affected

Latest PX4-Autopilot vulnerabilities

• CVE-2026-102809 — PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command (CVSS 6.5)
• CVE-2026-102808 — PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress (CVSS 6.5)
• CVE-2026-86714 — PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman (CVSS 5.4)
• CVE-2026-86713 — PX4 Autopilot through 1.17.0 Use-After-Free in load_mon (CVSS 7.1)
• CVE-2026-86097 — PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select (CVSS 6.5)
• CVE-2026-86096 — PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup (CVSS 5.9)
• CVE-2026-84698 — PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size (CVSS 6.5)
• CVE-2026-32743 — PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling (CVSS 6.5)
• CVE-2026-32724 — PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition (CVSS 5.3)
• CVE-2026-32713 — PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors (CVSS 6.5)
• CVE-2026-32709 — PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete) (CVSS 6.8)
• CVE-2026-32708 — Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) (CVSS 8.0)
• CVE-2026-32707 — PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop (CVSS 6.1)
• CVE-2026-32706 — PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet (CVSS 8.1)
• CVE-2026-32705 — PX4 autopilot BST Device Name Length Can Overflow Driver Buffer (CVSS 6.8)
• CVE-2026-26742 — (CVSS 8.1)
• CVE-2026-26741 — (CVSS 8.1)
• CVE-2025-15150 — PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow (CVSS 7.8)
• CVE-2025-9020 — PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free (CVSS 4.5)
• CVE-2024-40427 — (CVSS 7.9)
• CVE-2024-38952 — (CVSS 7.5)
• CVE-2024-38951 — (CVSS 6.5)
• CVE-2024-30800 — (CVSS 5.6)
• CVE-2024-30799 — (CVSS 4.4)
• CVE-2024-29460 — (CVSS 6.6)