CVE-2023-47625 Global Buffer Overflow leading to denial of service in PX4-Autopilot

Low 2.9 Published 13 Nov 2023 Updated 3 Sep 2024

A buffer overflow in PX4 Autopilot allows remote attackers to cause denial of service by sending malicious RC packets, requiring an upgrade to fix.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-47625?

CVE-2023-47625 is a low-severity memory corruption vulnerability in PX4-Autopilot, published on 13 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_TryParseCrsfPacket function in /src/drivers/rc/crsf_rc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and that packet goes into the device where the _rcs_buf reads. The global buffer overflow vulnerability will be triggered and the drone can behave unexpectedly. This issue has been addressed in version 1.14.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Weakness: CWE-120

Which versions are affected by CVE-2023-47625?

It affects 1 product.

Products include Dronecode Px4 Drone Autopilot.

How do I fix CVE-2023-47625?

No fix has been published for CVE-2023-47625 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-47625 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-47625 exists.

Sources

Also known as GHSA-qpw7-65ww-wj82.