Skip to content
Threat Feed

Product

PX4-Autopilot (<= 1.17.0-Rc1)

1 brief RSS
medium threat

Dronecode PX4-Autopilot tattu_can Stack Buffer Overflow (CVE-2026-32707)

A stack-based buffer overflow vulnerability exists in the `tattu_can` driver of Dronecode PX4-Autopilot versions 1.17.0-rc1 and earlier; by injecting specially crafted CAN frames, an attacker can trigger an unbounded memcpy operation, leading to a stack corruption and subsequent crash of the PX4 process, resulting in a denial of service.

PX4-Autopilot Mohammed Idrees Banyamer stack buffer overflow denial of service CVE-2026-32707
2r 1t 1c