Threats affecting pkg:github/drone-lab/PX4-Autopilot

25 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.7%	CVE-2024-38952PX4-Autopilot · Classic Buffer Overflow High7.5EPSS 0.7%2024-06-25CVE Database V5CVE-2024-38952 PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.cpp. EPSS 0.7%Vulnerability CWE-120	CVE Database V5	2024-06-25
Medium	6.5	EPSS 0.5%	CVE-2024-38951PX4-Autopilot · Classic Buffer Overflow Medium6.5EPSS 0.5%2024-06-25CVE Database V5CVE-2024-38951 A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink message. EPSS 0.5%Vulnerability CWE-120	CVE Database V5	2024-06-25
Medium	4.4	EPSS 0.3%	CVE-2024-30799PX4-Autopilot · Classic Buffer Overflow Medium4.4EPSS 0.3%2024-04-22CVE Database V5CVE-2024-30799 An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function. EPSS 0.3%Vulnerability CWE-120	CVE Database V5	2024-04-22
Medium	6.6	EPSS 0.2%	CVE-2024-29460PX4-Autopilot · Improper Handling of Values Medium6.6EPSS 0.2%2024-04-10CVE Database V5CVE-2024-29460 An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component. EPSS 0.2%Vulnerability CWE-229	CVE Database V5	2024-04-10
Medium	4.2	EPSS 0.4%	CVE-2024-24254PX4 Autopilot · Race Condition Medium4.2EPSS 0.4%2024-02-06CVE Database V5CVE-2024-24254 PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes. EPSS 0.4%Vulnerability CWE-362	CVE Database V5	2024-02-06

Page 2 of 2