CVE-2026-32724 | PX4 PX4-Autopilot up to 1.17.0-rc1 CONTROL Message MavlinkShell::available use after free

March 14, 2026 Yanac

A vulnerability classified as critical has been found in PX4 PX4-Autopilot up to 1.17.0-rc1. The affected element is the function MavlinkShell::available of the component CONTROL Message Handler. This manipulation causes use after free.

The identification of this vulnerability is CVE-2026-32724. The attack needs to be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More