PX4 Autopilot up to 1.17.0 Test Command file2 c stack-based overflow

Summaryinfo

A vulnerability was found in PX4 Autopilot up to 1.17.0. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file file2 of the component Test Command. The manipulation of the argument c leads to stack-based overflow. This vulnerability is documented as CVE-2026-102809. The attack needs to be performed locally. There is not any exploit available.

Detailsinfo

A vulnerability was found in PX4 Autopilot up to 1.17.0 and classified as problematic. This issue affects an unknown code block of the file file2 of the component Test Command. The manipulation of the argument c with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is availability. The summary by CVE is:

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-102809 since 09/29/2026. The exploitation is known to be easy. An attack has to be approached locally. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/29/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• PX4

Name

• Autopilot

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion