Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc1, a heap-use-after-free is detected in the MavlinkShell::available() function. The issue is caused by a race condition between the MAVLink receiver thread (which handles shell creation/destruction) and the telemetry sender thread (which polls the shell for available output). The issue is remotely triggerable via MAVLink SERIAL_CONTROL messages (ID 126), which can be sent by an external ground station or automated script. This vulnerability is fixed in 1.17.0-rc1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-32724 PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc1, a heap-use-after-free is detected in the MavlinkShell::available() function. The issue is … https://www.cve.org/CVERecord?id=CVE-2026-32724
Post summary
The post reports a heap‑use‑after‑free vulnerability in PX4 autopilot before version 1.17.0‑rc1, linking to the CVE record without mentioning a PoC, exploit, or patch.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-32724 - PX4 autopilot has a heap Use-After-Free in MavlinkShell::available() via SERIAL_CONTROL Race Condition Intel Report: https://ift.tt/TUycpfk
Post summary
Intel reports CVE-2026-32724 as a heap use‑after‑free in PX4 autopilot triggered by a SERIAL_CONTROL race condition; no PoC, exploit, or patch information is provided.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dronecode | px4_drone_autopilot | - | - | - |
| App | dronecode | px4_drone_autopilot | 1.17.0 | - | - |
| App | dronecode | px4_drone_autopilot | 1.17.0 | - | - |