← Back

Ardupilot

ardupilot

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Apweb
apweb
1 CVE
Arduplane
arduplane
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-38971
1Ardupilot
1Arduplane
Jul 9, 2026
Jul 2, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control().
CVE-2022-28711
1Ardupilot
1Apweb
Jun 17, 2026
Apr 14, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker...Show more
A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.Show less