PT-2026-25388

CVE-2026-32705

Published

2026-03-13

Updated

2026-03-16

Description by

CVSS 3.1

6.8

Medium

MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PX4 autopilot versions prior to 1.17.0-rc2

Description PX4 autopilot is a flight control solution for drones. The BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized dev name len, causing a stack overflow in the driver and potentially enabling code execution.

Recommendations Update to version 1.17.0-rc2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Enitmar

Max-R-B

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow