CVE-2025-5640: PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow
A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handlemessagetrajectoryrepresentationwaypoints of the file mavlinkreceiver.cpp of the component TRAJECTORYREPRESENTATIONWAYPOINTS Message Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5640?
CVE-2025-5640 is classified as problematic due to its impact on the MavlinkReceiver component in PX4-Autopilot.
How do I fix CVE-2025-5640?
To address CVE-2025-5640, users should update to the latest version of the PX4 Autopilot software that resolves this vulnerability.
What component is affected by CVE-2025-5640?
CVE-2025-5640 affects the MavlinkReceiver::handle_message_trajectory_representation_waypoints function in the mavlink_receiver.cpp file.
Are there any known exploits for CVE-2025-5640?
As of now, there are no publicly disclosed exploits specifically targeting CVE-2025-5640.
What systems are impacted by CVE-2025-5640?
CVE-2025-5640 impacts users of the PX4 Autopilot version 1.12.3.