CVE-2026-84698
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Sep 02, 2026
Vendor
unknown
Description
PX4 Autopilot contains a heap buffer overflow vulnerability in the sd_bench command that writes a four-byte block number into a user-supplied sized allocation. Attackers can invoke sd_bench with a block size below four bytes to overflow the heap buffer and potentially execute code or crash the system.