Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-5640. PoCs published by Mohammed Idrees Banyamer, mbanyamer.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in PX4 Military UAV Autopilot via a malformed MAVLink message, causing a DoS by crashing the autopilot. It sends a crafted hex payload over UDP to trigger the vulnerability.
Description
A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_representation_waypoints of the file mavlink_receiver.cpp of the component TRAJECTORY_REPRESENTATION_WAYPOINTS Message Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Exploits (2)
This exploit demonstrates a stack-based buffer overflow in PX4 Military UAV Autopilot via a malformed MAVLink message, causing a DoS by crashing the autopilot. It sends a crafted hex payload over UDP to trigger the vulnerability.
This is a functional proof-of-concept exploit for CVE-2025-5640, demonstrating a stack-based buffer overflow in PX4 Military UAV Autopilot via a malformed MAVLink message. The exploit sends a crafted UDP packet to trigger a denial-of-service (DoS) condition.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L