CVE-2025-15150 PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow

Medium 4.8 Published 28 Dec 2025 Updated 29 Dec 2025

A stack-based buffer overflow in PX4 Autopilot allows local attackers to execute arbitrary code or cause a denial of service.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-15150?

CVE-2025-15150 is a medium-severity memory corruption vulnerability in PX4-Autopilot, published on 28 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::state_listing/MavlinkLogHandler::log_entry_from_id of the file src/modules/mavlink/mavlink_log_handler.cpp. The manipulation results in stack-based buffer overflow. The attack is only possible with local access. The patch is identified as 338595edd1d235efd885fd5e9f45e7f9dcf4013d. It is best practice to apply a patch to resolve this issue.

Weakness: CWE-121, CWE-787, CWE-119

Which versions are affected by CVE-2025-15150?

It affects 1 product.

Products include Dronecode Px4 Drone Autopilot.

How do I fix CVE-2025-15150?

No fix has been published for CVE-2025-15150 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-15150 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-15150 exists.

Sources

Also known as GHSA-vgjw-r3pf-238c.