CVE-2026-86714: PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console output or writing it into persistent network configuration files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PX4 Autopilot netman system commandto a version that resolves this vulnerability.Fixed in 1.17.0
Event History
Frequently Asked Questions
Which deployments should be considered affected?
PX4 Autopilot versions through 1.17.0 are affected. Systems where the netman command can be invoked with an attacker-controlled -i interface-name argument are relevant.
What access does an attacker need?
The supplied vector indicates adjacent-network access, low attack complexity, no privileges, and no user interaction. Exploitation requires providing an interface name of at least 74 bytes through netman's -i option.
What evidence could indicate exploitation?
The over-read can expose stack memory in console output or cause it to be written to persistent network configuration files. Oversized interface-name values and unexpected memory-like content in those outputs or files are relevant indicators.