Executive brief
PX4 Autopilot is open-source flight control software used in autonomous drones and unmanned aerial vehicles. The netman system command contains a stack buffer over-read vulnerability that allows attackers to leak sensitive memory contents or corrupt persistent network configuration by supplying overly long interface names. This could lead to information disclosure or network misconfiguration affecting drone operations.
Technical details
PX4 Autopilot through version 1.17.0 contains a stack buffer over-read vulnerability in the netman system command due to insufficient validation of interface name length. The -i command-line option does not properly bounds-check supplied interface names, allowing attackers to provide names of 74 bytes or longer to read beyond the allocated buffer on the stack. An attacker with local access to execute system commands can trigger this vulnerability to leak stack memory to console output or write it into persistent network configuration files, potentially exposing sensitive data or corrupting network settings. No remote exploitation vector is present as this requires local command execution capability.
Affected products
- PX4 Autopilot through 1.17.0
Timeline
- 2026-09-08: disclosed