CVE-2025-15150CWE-119CWE-121CWE-787

CVE-2025-15150

Medium · published December 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0. Affected by this issue is the function MavlinkLogHandler::state_listing/MavlinkLogHandler::log_entry_from_id of the file src/modules/mavlink/mavlink_log_handler.cpp. The manipulation results in stack-based buffer overflow. The attack is only possible with local access. The patch is identified as 338595edd1d235efd885fd5e9f45e7f9dcf4013d. It is best practice to apply a patch to resolve this issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-12-29T00:15Z
Affected products (1)
ProductVersionsFixed in
dronecode/px4_drone_autopilot≤ 1.16.0—
References (7)
https://github.com/PX4/PX4-Autopilot/issues/26118 · [email protected]https://github.com/PX4/PX4-Autopilot/pull/26124 · [email protected]https://github.com/PX4/PX4-Autopilot/pull/26124/commits/338595edd1d235efd885fd5e9f45e7f9dcf4013d · [email protected]https://vuldb.com/?ctiid.338527 · [email protected]https://vuldb.com/?id.338527 · [email protected]https://vuldb.com/?submit.717323 · [email protected]https://github.com/PX4/PX4-Autopilot/issues/26118 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 28 DEC 19:02Z
    PX4 PX4-Autopilot mavlink_log_handler.cpp log_entry_from_id stack-based overflow
    cvelistv5