CyberRota Analysis
AI-GeneratedPX4 Autopilot versions up to 1.17.0 are vulnerable to a use-after-free issue in the TemperatureCalibration::start() function, stemming from a race condition between task spawning and object deletion. Exploitation allows attackers to manipulate the calibration process through shell commands, potentially leading to heap corruption and destabilization of the system. Organizations utilizing PX4 Autopilot should prioritize addressing this vulnerability to mitigate risks associated with system instability and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or allocator metadata and destabilizing heap operations.