PT-2026-55304 · Git+1 · Ardupilot+1

·

CVE-2026-38971

·

Published

2026-07-02

·

Updated

2026-07-09

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions ardupilot versions prior to Plane-4.6.4
Description An out-of-bounds read issue exists in the GCS MAVLINK::handle serial control() function within the libraries/GCS MAVLink/GCS serial control.cpp file. An out-of-bounds read occurs when a program reads data past the end of the intended buffer, which can lead to system instability or information disclosure.
Recommendations Update ardupilot to version Plane-4.6.4 or later.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-38971

Affected Products

Ardupilot
Arduplane