CVE-2025-71412

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Injection of false emergency or status messages over CPDLC (Controller-Pilot Data Link Communications), a system used for text-based communication between aircraft and air traffic control, may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This attack can be executed remotely via radio frequency.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.