VulnerabilityModified

CVE-2026-32705

A malicious BST device can report an oversized dev_name_len, causing a stack overflow in the driver and crashing the task (or enabling code execution).

MEDIUM 6.8EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized dev_name_len, causing a stack overflow in the driver and crashing the task (or enabling code execution). This vulnerability is fixed in 1.17.0-rc2.

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-121
Affected: dronecode/px4 drone autopilot
Source: security-advisories@github.com

References

https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-79mp-34pp-2f3fExploit, Vendor Advisory
https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-79mp-34pp-2f3fExploit, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.