CVE-2026-32706 - Vulnerability Analysis

Overview

PX4 autopilot < 1.17.0-rc2 contains a buffer overflow caused by lack of bounds check when copying oversized variable-length known packets in crsf_rc parser, letting adjacent/raw-serial attackers cause memory corruption and crash PX4, exploit requires attacker to have access to CRSF serial port.

Severity & Score

Impact

Attackers can cause memory corruption leading to a crash, resulting in denial of service of the autopilot system.

Mitigation

Update to version 1.17.0-rc2 or later.

References

• https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-mqgj-hh4g-fg5p

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner