CVE-2026-102808
Last modified
CVE-2026-102808 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation before being passed to malloc() and memset(). Attackers with shell access, including through MAVLink, can supply invalid byte count values to crash the flight controller..
Description
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation before being passed to malloc() and memset(). Attackers with shell access, including through MAVLink, can supply invalid byte count values to crash the flight controller.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| PX4 | PX4-Autopilot | <= 1.17.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-102808?
How severe is CVE-2026-102808?
How do I fix CVE-2026-102808?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10278A vulnerability was determined in ishayoyo excel-mcp up to 1…6.3
- CVE-2026-10279A vulnerability was identified in hiraishikentaro wezterm-mc…6.3
- CVE-2026-102796Improper Neutralization of Special Elements used in an SQL C…
- CVE-2026-10280A security flaw has been discovered in horizon921 mcpilot 0.…7.3
- CVE-2026-102806OpenClaw before 2026.9.5 contains an incorrect authorization…6.3
- CVE-2026-102807OpenClaw before 2026.9.4 contains an incorrect authorization…5.3
- CVE-2026-102809PX4 Autopilot through 1.17.0 contains an uncontrolled stack …6.5
- CVE-2026-10281A weakness has been identified in Enderfga claw-orchestrator…7.3
- CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
- CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
- CVE-2026-10282A security vulnerability has been detected in Bottelet Dayby…5.3
- CVE-2026-10283A vulnerability was detected in Bottelet DaybydayCRM up to 2…6.3
Are you affected by CVE-2026-102808?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST