Skip to content
Threat Feed

CPE

Cpe:2.3:a:dronecode:px4_drone_autopilot:1.17.0:alpha1:*:*:*:*:*:*

2 briefs RSS
medium advisory

Dronecode PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS (CVE-2026-32743)

A stack-based buffer overflow vulnerability exists in Dronecode PX4 Autopilot versions up to and including 1.17.0-rc2 that allows an attacker with MAVLink link access to cause a denial of service by creating a deeply nested directory via MAVLink FTP and then requesting the log list, crashing the MAVLink task.

Px4_Drone_Autopilot +1 px4 autopilot drone denial-of-service buffer-overflow
2r 3t 1c
medium threat

Dronecode PX4-Autopilot tattu_can Stack Buffer Overflow (CVE-2026-32707)

A stack-based buffer overflow vulnerability exists in the `tattu_can` driver of Dronecode PX4-Autopilot versions 1.17.0-rc1 and earlier; by injecting specially crafted CAN frames, an attacker can trigger an unbounded memcpy operation, leading to a stack corruption and subsequent crash of the PX4 process, resulting in a denial of service.

PX4-Autopilot Mohammed Idrees Banyamer stack buffer overflow denial of service CVE-2026-32707
2r 1t 1c