PT-2024-22912 · Unknown · Px4-Autopilot

Published 2024-03-14 · Updated 2025-06-12 · CVE-2024-29460

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions PX4 Autopilot version 1.14.0

Description An issue in the mission block.cpp component allows an attacker to manipulate the flight path, potentially causing crashes of the drone by altering the home point location.

Recommendations For PX4 Autopilot version 1.14.0, consider restricting access to the mission block.cpp component to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the home point location feature in the mission block.cpp component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-229

Related Identifiers

BDU:2026-07581

CVE-2024-29460

Affected Products

Px4-Autopilot

References · 8

• https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can%27t-finish-mission/report-can%27t-finish-mission.md · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-29460 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29460 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07581 · Security Note
• https://t.me/cvenotify/125560 · Telegram Post
• https://t.me/cvenotify/76429 · Telegram Post
• https://t.me/cvenotify/76329 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1778199837894230484 · Twitter Post