PX4 Military UAV Autopilot 1.12.3 · Denial of Service (DoS)
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Jul 2025, 01:53 UTC
What to do
AI-suggested
To mitigate this threat, European organizations should prioritize updating the PX4 autopilot software to a patched version once available. In the absence of an official patch, organizations should implement network-level protections such as strict filtering and segmentation to limit access to UAV control interfaces only to trusted sources. Employing intrusion detection systems (IDS) tailored to UAV communication protocols can help identify and block anomalous traffic indicative of DoS attempts. Additionally, UAV operators should enforce strong authentication and encryption on command and telemetry channels to prevent unauthorized access. Regular security audits and penetration testing of UAV systems can help identify weaknesses before exploitation. Finally, contingency plans should be developed to safely recover or disable UAVs experiencing autopilot failures to minimize physical and operational risks.
Description
PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
Indicators of compromise
Exploit source code
# Exploit Title: PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
# Author: Mohammed Idrees Banyamer (@banyamer_security)
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-21
# Tested on: Ubuntu 20.04 LTS + PX4 SITL (jMAVSim)
# CVE: CVE-2025-5640
# Type: Denial of Service (DoS) via Buffer Overflow
# Platform: Cross-platform (Military UAVs / PX4 SITL / Linux-based autopilot ground station)
# Author Country: Jordan
# Description:
# A stack-based buffer overflow vulnerability in P…