CVE-2026-32708: Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot)
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack VLA directly from the incoming payload length without bounds. A remote Zenoh publisher can send an oversized fragmented message to force an unbounded stack allocation and copy, causing a stack overflow and crash of the Zenoh bridge task. This vulnerability is fixed in 1.17.0-rc2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32708?
CVE-2026-32708 has been classified with a high severity due to the potential for arbitrary stack allocation leading to security vulnerabilities.
What software versions are affected by CVE-2026-32708?
CVE-2026-32708 affects PX4 autopilot versions prior to 1.17.0-rc2.
How do I fix CVE-2026-32708?
To fix CVE-2026-32708, update your PX4 autopilot software to version 1.17.0-rc2 or later.
What kind of attack does CVE-2026-32708 allow?
CVE-2026-32708 allows a remote Zenoh publisher to send an oversized payload that can potentially lead to stack corruption.
Can CVE-2026-32708 affect other software besides PX4?
CVE-2026-32708 specifically affects the PX4 autopilot and is not reported to affect other software at this time.