CVE-2024-40427

Katalog CVE

CVSS 7.9 · High EPSS 0,35%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada dronecode px4 drone autopilot. Skor CVSS 3.1 7.9 (High) menurut CISA ADP.

Deskripsi (NVD)

Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute

Rincian

Terbit di NVD

7 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.9 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-55wq-2hgm-75m4 exploit · advisory vendor
• https://github.com/PX4/PX4-Autopilot/commit/e03e0261a1a0c82f545e66a1e3795956c886db71 patch