CVE-2026-32705
PX4 autopilot BST Device Name Length Can Overflow Driver Buffer
Résumé
PX4 autopilot BST Device Name Length Can Overflow Driver Buffer
Description d'origine
La description telle que publiée par la source (souvent en anglais).
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized dev_name_len, causing a stack overflow in the driver and crashing the task (or enabling code execution). This vulnerability is fixed in 1.17.0-rc2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov