CyberRota Analysis
AI-GeneratedThe PX4 Autopilot is vulnerable to a heap buffer overflow in the sd_bench command, allowing attackers to exploit a user-defined block size to overflow the heap and potentially execute arbitrary code or crash the system. Organizations utilizing PX4 Autopilot should prioritize addressing this vulnerability to mitigate risks associated with unauthorized code execution and system instability. This is particularly critical for those operating in safety-sensitive environments where autopilot functionality is essential.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number into a user-supplied sized allocation. Attackers can invoke sd_bench with a block size below four bytes to overflow the heap buffer and potentially execute code or crash the system.