CVE-2026-102808Published
PX4 Autopilot through 1.17.0 NULL Pointer Dereference via sd_stress
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-102808 · Microsoft / collected KEV context
cve-program · CVE-2026-102808
- https://github.com/PX4/PX4-Autopilot/pull/28795
- https://github.com/PX4/PX4-Autopilot/commit/c865dc9fde14d1391916775153aa271603c3c592
- https://github.com/PX4/PX4-Autopilot/blob/d6f12ad1c4f70ad3230afd7d86e971421e02fef4/src/systemcmds/sd_stress/sd_stress.cpp#L186-L204
- https://github.com/PX4/PX4-Autopilot
- https://www.vulncheck.com/advisories/px4-autopilot-through-1.17.0-null-pointer-dereference-via-sd-stress
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.