PT-2026-25388

CVE-2026-32705

Publicado

2026-03-13

Atualizado

2026-03-16

Descrição por

CVSS 3.1

6.8

Média

MétricasAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PX4 autopilot versions prior to 1.17.0-rc2

Description PX4 autopilot is a flight control solution for drones. The BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized dev name len, causing a stack overflow in the driver and potentially enabling code execution.

Recommendations Update to version 1.17.0-rc2 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Enitmar

Max-R-B

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-121: Stack-based Buffer Overflow