CVE-2024-51395
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Buffer Overflow vulnerability in ArduPilot Copter latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio, AP_SmartAudio.cpp components.
Risk Assessment
A local attacker could cause a crash or hang of the ArduPilot system, resulting in denial of service.
Recommendation
Update ArduPilot to a version containing the fix for the AP_SmartAudio component.
Other vulnerabilities in ArduPilot
See all- CVE-2026-38971Critical
An out-of-bounds read issue was found in the GCS_MAVLink library of ArduPilot up to version Plane-4.6.3, specifically in the GCS_MAVLINK::handle_serial_control() function. This vulnerability may lead to unexpected behavior or data leakage.
- CVE-2024-48519Medium
Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRover, ADIS1647x Sensor component.
- CVE-2024-51394Medium
Buffer Overflow vulnerability in ArduPilot Copter latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_MSP::loop, AP_MSP, AP_MSP.cpp components.
Original NVD description (English source)
Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio, AP_SmartAudio.cpp components.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS