CVE-2026-102809
Last modified
CVE-2026-102809 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller..
Description
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight controller.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| PX4 | PX4-Autopilot | <= 1.17.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-102809?
How severe is CVE-2026-102809?
How do I fix CVE-2026-102809?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10279A vulnerability was identified in hiraishikentaro wezterm-mc…6.3
- CVE-2026-102796Improper Neutralization of Special Elements used in an SQL C…
- CVE-2026-10280A security flaw has been discovered in horizon921 mcpilot 0.…7.3
- CVE-2026-102806OpenClaw before 2026.9.5 contains an incorrect authorization…6.3
- CVE-2026-102807OpenClaw before 2026.9.4 contains an incorrect authorization…5.3
- CVE-2026-102808PX4 Autopilot through 1.17.0 contains a NULL pointer derefer…6.5
- CVE-2026-10281A weakness has been identified in Enderfga claw-orchestrator…7.3
- CVE-2026-102810Marmite through 0.4.2 contains a path traversal vulnerabilit…7.5
- CVE-2026-102811Marmite through 0.4.2 contains missing authentication in the…7.5
- CVE-2026-10282A security vulnerability has been detected in Bottelet Dayby…5.3
- CVE-2026-102820pageant provides a [PageantStream] type that implements [Asy…6.2
- CVE-2026-102821Russh is a Rust SSH client and server library. Prior to 0.63…6.5
Are you affected by CVE-2026-102809?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST