px4 drone autopilot vulnerabilities and fixes

Recent CVEs affecting px4 drone autopilot, with upgrade or downgrade steps. 14 tracked.

Also searched as: px4droneautopilot.

px4 drone autopilot has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2026-03-19. Highest priority: CVE-2024-38952 (score 50/100).

• CVE-2025-15150 MEDIUM 5.3 UPGRADE A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0
• CVE-2026-32743 MEDIUM 6.5 UPGRADE PX4 is an open-source autopilot stack for drones and unmanned vehicles
• CVE-2026-32724 MEDIUM 5.3 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32713 MEDIUM 4.3 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32709 MEDIUM 5.4 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32708 HIGH 7.8 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32707 MEDIUM 5.2 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32706 HIGH 7.1 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-32705 MEDIUM 6.8 UPGRADE PX4 autopilot is a flight control solution for drones
• CVE-2026-26742 HIGH 8.1 UPGRADE PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Perio
• CVE-2026-26741 HIGH 8.1 UPGRADE PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism
• CVE-2024-40427 HIGH 7.9 UPGRADE Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vul
• CVE-2024-38952 HIGH 7.5 DOWNGRADE PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logg
• CVE-2024-38951 MEDIUM 6.5 DOWNGRADE A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted M

FAQ

How do I fix px4 drone autopilot vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is px4 drone autopilot being exploited right now?

None of the tracked px4 drone autopilot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which px4 drone autopilot CVE should I patch first?

CVE-2024-38952 currently ranks highest (50/100): PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logg.

RSS feed for px4 drone autopilot · ← Back to latest CVEs