CVE-2026-38971
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
An out-of-bounds read issue was found in the GCS_MAVLink library of ArduPilot up to version Plane-4.6.3, specifically in the GCS_MAVLINK::handle_serial_control() function. This vulnerability may lead to unexpected behavior or data leakage.
Risk Assessment
The risk involves potential data integrity compromise or exposure of sensitive information in systems running ArduPilot, which could affect the safety of flight operations.
Recommendation
It is recommended to immediately update ArduPilot to a version newer than Plane-4.6.3 and apply security patches provided by the vendor.
Other vulnerabilities in ArduPilot
See all- CVE-2024-48519Medium
Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component.
- CVE-2024-51395Medium
Buffer Overflow vulnerability in ArduPilot Copter latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio, AP_SmartAudio.cpp components.
- CVE-2024-51394Medium
Buffer Overflow vulnerability in ArduPilot Copter latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_MSP::loop, AP_MSP, AP_MSP.cpp components.
Original NVD description (English source)
ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control().
Vulnerability data from NVD (NIST) · CISA KEV · EPSS