PT-2023-29936 · Unknown · Px4-Autopilot

Zeroone-Kr · Published 2023-10-31 · Updated 2023-11-08 · CVE-2023-46256

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions PX4-Autopilot versions 1.14.0-rc1 and prior

Description The issue is related to a heap buffer overflow vulnerability in the parser function of PX4-Autopilot due to the absence of parserbuf index value checking. This can cause unexpected drone behavior if a sensor device malfunctions. Additionally, malicious applications can exploit this vulnerability even without a sensor malfunction, allowing up to the maximum value of an unsigned int bytes of data to be written to the heap memory area.

Recommendations As a temporary workaround, consider disabling the parser function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-122

CWE-787

Related Identifiers

CVE-2023-46256

GHSA-5HVV-Q2R5-RPPW

Affected Products

Px4-Autopilot

References · 7

• 🔥 https://github.com/PX4/PX4-Autopilot/security/advisories/GHSA-5hvv-q2r5-rppw · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46256.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-46256 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46256 · Vendor Advisory
• https://github.com/PX4/PX4-Autopilot/blob/main/src/drivers/distance_sensor/lightware_laser_serial/parser.cpp#L87 · Note
• https://t.me/cibsecurity/73256 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1719423393122984297 · Twitter Post