Technical impact
The vulnerability arises from an uncontrolled stack allocation in the file2 test command of PX4 Autopilot. The write chunk size is not validated, allowing an attacker with shell access to supply an arbitrarily large value to the -c option. This causes a stack overflow that crashes the flight controller and interrupts its operation.
Affected Systems
The flaw affects all releases of PX4 Autopilot up to and including version 1.17.0. The firmware is used in a wide range of drone flight controllers, so any installation running one of these versions could be impacted.
Risk and Exploitability
The CVSS base score of 7.1 indicates a medium‑to‑high severity. Exploitation requires that the attacker already have shell access to the controller, after which the oversized chunk size can be supplied. No EPSS score is available, and the vulnerability is not yet listed in CISA KEV, suggesting that while the crash potential is significant, the likelihood of widespread exploitation at this time is uncertain. Patch the firmware to remove the vulnerable code path to mitigate the risk.
