Race Condition Vulnerability in PX4 Autopilot Allows Unauthorized Drone Missions

Race Condition Vulnerability in PX4 Autopilot Allows Unauthorized Drone Missions

CVE-2024-24255 · MEDIUM Severity

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.

Learn more about our Web Application Penetration Testing UK.