CVE-2026-32707

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu_can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattu_can is enabled and running, a CAN-injection-capable attacker can trigger a crash (DoS) and memory corruption. This vulnerability is fixed in 1.17.0-rc2.

Affected products

Px4-Autopilot, Px4 Drone Autopilot

Dronecode px4 Drone Autopilot

< 1.17.0

Fix

Available

CVSS 3.1

6.1 MEDIUM

EPSS

0.3% (19th percentile)

Weakness

CWE-121

NVD status

Modified

Published

2026-03-13