← Back

Px4 Drone Autopilot

px4_drone_autopilot

Vendor: Dronecode • 23 CVEs

CVEs (23)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dronecode
1Px4 Drone Autopilot
Jun 17, 2026
Oct 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value...Show more
PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a heap buffer overflow vulnerability in the parser function due to the absence of `parserbuf_index` value checking. A malfunction of the sensor device can cause a heap buffer overflow with leading unexpected drone behavior. Malicious applications can exploit the vulnerability even if device sensor malfunction does not occur. Up to the maximum value of an `unsigned int`, bytes sized data can be written to the heap memory area. As of time of publication, no fixed version is available.Show less
1Dronecode
1Px4 Drone Autopilot
Jun 17, 2026
Jul 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
2Dronecode
Yuneec
2Mantis Q Firmware
Px4 Drone Autopilot
Jun 17, 2026
Mar 9, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.