Use-After-Free Vulnerability in PX4 Autopilot by PX4

CVE-2026-86713

What is CVE-2026-86713?

The PX4 Autopilot, up to version 1.17.0, has a use-after-free vulnerability present in the load_mon module during its stop procedure. Specifically, the issue arises when the exit_and_cleanup() function deletes the LoadMon object and frees the performance counter before the perf_end() function accesses it. This flaw can be exploited by adversaries issuing the load_mon stop command via PXH or MAVLink shells, leading to unauthorized reads and writes against freed memory. Such actions can result in heap object corruption, destabilizing the flight stack and potentially posing significant operational risks.

References