CyberRota Analysis
AI-GeneratedPX4 Autopilot versions up to 1.17.0 are vulnerable due to a use-after-free flaw in the load_mon module, which can be exploited by attackers issuing a stop command from a PXH or MAVLink shell. This vulnerability allows unauthorized access to freed memory, potentially leading to heap corruption and destabilization of the flight stack, posing significant risks to flight safety. Organizations utilizing PX4 Autopilot should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it. Attackers can trigger this vulnerability by issuing the load_mon stop command from any PXH or MAVLink shell, causing reads and writes through freed memory that corrupt heap objects and destabilize the flight stack.