https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:08:36.524666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-32708 CVE-2026-32708 — Zenoh uORB Subscriber Allows Arbitrary Stack Allocation (PX4/PX4-Autopilot) 2026-10-07T16:08:36.542119+00:00

Affected: PX4-Autopilot

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack VLA directly from the incoming payload length without bounds. A remote Zenoh publisher can send an oversized fragmented message to force an unbounded stack allocation and copy, causing a stack overflow and crash of the Zenoh bridge task. This vulnerability is fixed in 1.17.0-rc2.