PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf_rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsf_rc is enabled on a CRSF serial port, an adjacent/raw-serial attacker can trigger memory corruption and crash PX4. This vulnerability is fixed in 1.17.0-rc2.
References
| Link | Resource |
|---|---|
| https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-mqgj-hh4g-fg5p | Exploit Vendor Advisory |
| https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-mqgj-hh4g-fg5p | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Mar 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-mqgj-hh4g-fg5p - Exploit, Vendor Advisory |
16 Mar 2026, 20:10
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dronecode
Dronecode px4 Drone Autopilot |
|
| References | () https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-mqgj-hh4g-fg5p - Exploit, Vendor Advisory | |
| CPE | cpe:2.3:a:dronecode:px4_drone_autopilot:1.17.0:rc1:*:*:*:*:*:* cpe:2.3:a:dronecode:px4_drone_autopilot:1.17.0:alpha1:*:*:*:*:*:* cpe:2.3:a:dronecode:px4_drone_autopilot:1.17.0:beta1:*:*:*:*:*:* cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:* |
16 Mar 2026, 14:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-16 14:19
Updated : 2026-03-17 16:16
NVD link : CVE-2026-32706
Mitre link : CVE-2026-32706
CVE.ORG link : CVE-2026-32706
JSON object : View
Products Affected
dronecode
- px4_drone_autopilot