Description
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation before being passed to malloc() and memset(). Attackers with shell access, including through MAVLink, can supply invalid byte count values to crash the flight controller.
Published: 2026-09-29
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 29 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Description PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation before being passed to malloc() and memset(). Attackers with shell access, including through MAVLink, can supply invalid byte count values to crash the flight controller.
Title PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
First Time appeared Px4
Px4 autopilot
Weaknesses CWE-476
CPEs cpe:2.3:a:px4:autopilot:*:*:*:*:*:*:*:*
Vendors & Products Px4
Px4 autopilot
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Px4 Autopilot
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-29T17:22:41.142Z

Reserved: 2026-09-29T17:11:35.728Z

Link: CVE-2026-102808

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-29T18:17:14.063

Modified: 2026-09-29T18:17:14.063

Link: CVE-2026-102808

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses