CVE-2024-24254: Race Condition
PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and missionfeasibilitychecker.cpp. This will result in the drone uploading overlapping geofences and mission routes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24254?
CVE-2024-24254 has a high severity level due to its potential to cause overlapping geofences and unsafe drone operations.
How do I fix CVE-2024-24254?
To fix CVE-2024-24254, upgrade to a version of PX4 Autopilot later than 1.14.0, which includes a synchronization mechanism for loading geofence data.
What is the impact of CVE-2024-24254 on drone operations?
The impact of CVE-2024-24254 on drone operations includes the risk of uploading conflicting geofences and mission routes, leading to operational failures.
Which versions of PX4 Autopilot are affected by CVE-2024-24254?
PX4 Autopilot versions up to and including 1.14.0 are affected by CVE-2024-24254.
How can I detect CVE-2024-24254 in my drone systems?
You can detect CVE-2024-24254 by reviewing the version of PX4 Autopilot used and checking for characteristics of overlapping geofence uploads in the drone's performance.