PT-2025-33453 · Px4 · Px4-Autopilot

0X20Z · Published 2025-08-15 · Updated 2025-08-15 · CVE-2025-9020

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: PX4 PX4-Autopilot versions through 1.15.4

Description: A use-after-free issue exists in the MavlinkReceiver::handle message serial control function within the src/modules/mavlink/mavlink receiver.cpp file of the Mavlink Shell Closing Handler component. The manipulation of the mavlink shell argument leads to this condition. An attack requires local access and is considered difficult to exploit.

Recommendations: Apply the patch with identifier 4395d4f00c49b888f030f5b43e2a779f1fa78708 to resolve this issue.

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

CVE-2025-9020

Affected Products

Px4-Autopilot

References · 12

• https://github.com/PX4/PX4-Autopilot/pull/25082/commits/4395d4f00c49b888f030f5b43e2a779f1fa78708 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-9020 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9020 · Vendor Advisory
• https://github.com/PX4/PX4-Autopilot/issues/25046 · Note
• https://github.com/PX4/PX4-Autopilot/pull/25082 · Note
• https://vuldb.com/?id.320081 · Note
• https://t.me/cveNotify/132405 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1956330377733165251 · Twitter Post
• https://vuldb.com/?submit.624722 · Note
• https://t.me/CVEtracker/30099 · Telegram Post
• https://vuldb.com/?ctiid.320081 · Note
• https://twitter.com/CVEnew/status/1956289022583836860 · Twitter Post