CVE-2026-32706Disclosure(dronecode / px4_drone_autopilot)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf_rc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsf_rc is enabled on a CRSF serial port, an adjacent/raw-serial attacker can trigger memory corruption and crash PX4. This vulnerability is fixed in 1.17.0-rc2.

dronecode CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-120CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

px4_drone_autopilot

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

dronecode

Products

px4_drone_autopilot

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-32706

Full discourse1 post

CVE@CVEnew212d
Disclosure
CVE-2026-32706 PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsf_rc parser accepts an oversized variable-length known packet and copies it into a … https://www.cve.org/CVERecord?id=CVE-2026-32706
Post summary
The post discloses that CVE‑2026‑32706 affects PX4 autopilot, involving an oversized packet in the crsf_rc parser that can cause a buffer overflow. No PoC, exploit code, patch information, or evidence of active exploitation is included.
00000107
56.7K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dronecode	px4_drone_autopilot	-	-	-
App	dronecode	px4_drone_autopilot	1.17.0	-	-
App	dronecode	px4_drone_autopilot	1.17.0	-	-
App	dronecode	px4_drone_autopilot	1.17.0	-	-

Explore more

Back to dashboard dronecode CVEs px4_drone_autopilot vulnerabilities