# PX4-Autopilot.

Every CVE that names PX4-Autopilot among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file2 Command](https://agentprime.io/advisories/CVE-2026-102809.md)
  `CVE-2026-102809` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service
- [PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress](https://agentprime.io/advisories/CVE-2026-102808.md)
  `CVE-2026-102808` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman](https://agentprime.io/advisories/CVE-2026-86714.md)
  `CVE-2026-86714` · CVE record: PX4 PX4-Autopilot · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot through 1.17.0 Use-After-Free in load_mon](https://agentprime.io/advisories/CVE-2026-86713.md)
  `CVE-2026-86713` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select](https://agentprime.io/advisories/CVE-2026-86097.md)
  `CVE-2026-86097` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup](https://agentprime.io/advisories/CVE-2026-86096.md)
  `CVE-2026-86096` · CVE record: PX4 PX4-Autopilot · CVSS 6.0 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size](https://agentprime.io/advisories/CVE-2026-84698.md)
  `CVE-2026-84698` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Memory corruption
- [PX4 Autopilot Missing authentication for critical function](https://agentprime.io/advisories/CVE-2026-1579.md)
  `CVE-2026-1579` · CVE record: PX4 Autopilot · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Authentication bypass
- [PX4 Autopilot: Stack-based Buffer Overflow via Oversized Path Input in MAVLink Log Request Handling](https://agentprime.io/advisories/CVE-2026-32743.md)
  `CVE-2026-32743` · CVE record: PX4 PX4-Autopilot · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Memory corruption
- [PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition](https://agentprime.io/advisories/CVE-2026-32724.md)
  `CVE-2026-32724` · CVE record: PX4 PX4-Autopilot · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption
- [PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors](https://agentprime.io/advisories/CVE-2026-32713.md)
  `CVE-2026-32713` · CVE record: PX4 PX4-Autopilot · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-670
- [PX4 Autopilot MAVLink FTP Unauthenticated Path Traversal (Arbitrary File Read/Write/Delete)](https://agentprime.io/advisories/CVE-2026-32709.md)
  `CVE-2026-32709` · CVE record: PX4 PX4-Autopilot · CVSS 5.4 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Path traversal
- [Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)](https://agentprime.io/advisories/CVE-2026-32708.md)
  `CVE-2026-32708` · CVE record: PX4 PX4-Autopilot · CVSS 7.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption
- [PX4 autopilot has a stack buffer overflow in tattu_can due to unbounded memcpy in frame assembly loop](https://agentprime.io/advisories/CVE-2026-32707.md)
  `CVE-2026-32707` · CVE record: PX4 PX4-Autopilot · CVSS 5.2 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption
- [PX4 autopilot has a global buffer overflow in crsf_rc via oversized variable-length known packet](https://agentprime.io/advisories/CVE-2026-32706.md)
  `CVE-2026-32706` · CVE record: PX4 PX4-Autopilot · CVSS 7.1 High · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption
- [PX4 autopilot BST Device Name Length Can Overflow Driver Buffer](https://agentprime.io/advisories/CVE-2026-32705.md)
  `CVE-2026-32705` · CVE record: PX4 PX4-Autopilot · CVSS 6.8 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Memory corruption
- [PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow](https://agentprime.io/advisories/CVE-2025-15150.md)
  `CVE-2025-15150` · CVE record: PX4 PX4-Autopilot · CVSS 4.8 Medium · Not analysed yet · Published 28 Dec 2025 · Tags: Memory corruption
- [PX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free](https://agentprime.io/advisories/CVE-2025-9020.md)
  `CVE-2025-9020` · CVE record: PX4 PX4-Autopilot · CVSS 2.0 Low · Not analysed yet · Published 15 Aug 2025 · Tags: Memory corruption
- [PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow](https://agentprime.io/advisories/CVE-2025-5640.md)
  `CVE-2025-5640` · CVE record: PX4-Autopilot · CVSS 4.8 Medium · Not analysed yet · Published 5 Jun 2025 · Tags: Memory corruption
- [Global Buffer Overflow leading to denial of service in PX4-Autopilot](https://agentprime.io/advisories/CVE-2023-47625.md)
  `CVE-2023-47625` · CVE record: PX4 PX4-Autopilot · CVSS 2.9 Low · Not analysed yet · Published 13 Nov 2023 · Tags: Memory corruption
- [PX4-Autopilot Heap Buffer Overflow Bug](https://agentprime.io/advisories/CVE-2023-46256.md)
  `CVE-2023-46256` · CVE record: PX4 PX4-Autopilot · CVSS 4.4 Medium · Not analysed yet · Published 31 Oct 2023 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=px4-autopilot>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/px4-autopilot/>. Everything for agents: <https://agentprime.io/llms.txt>.