A stack buffer over‑read exists in the netman system command of PX4 Autopilot versions up to 1.17.0. The command accepts an interface name via the -i option but does not validate its length. Attackers can supply names that are 74 bytes or longer, causing the program to read beyond the buffer boundaries and expose stack memory to the console output or persist it in network configuration files. This may reveal sensitive data such as passwords, keys, or internal state information.

The vulnerability affects PX4 Autopilot from the PX4 vendor through release 1.17.0. No additional versions or forks are listed in the advisory.

The CVSS score of 5.3 indicates moderate severity. EPSS data is not available, and the flaw is not listed in the CISA KEV catalog. The vulnerability can be exploited by anyone who can execute the netman command with the -i option, which typically requires local or (if the system is exposed) remote command execution privileges. Successful exploitation will result in the disclosure of stack memory contents but does not provide arbitrary code execution or full system control.