How severe is CVE-2024-29460?

CVE-2024-29460 has a CVSS 3.x base score of 6.6, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2024-29460 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-29460?

CVE-2024-29460 affects Dronecode Px4 Drone Autopilot. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-29460?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-29460 have an EU (EUVD) identifier?

Yes. CVE-2024-29460 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-26466.

When was CVE-2024-29460 published?

CVE-2024-29460 was published on 2024-04-10 and last updated on 2026-06-17.

CVE-2024-29460

CVE-2024-29460 is a medium-severity vulnerability in Dronecode Px4 Drone Autopilot with a CVSS 3.x base score of 6.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-229.

Key facts

Severity: Medium (CVSS 3.x base score 6.6)
EPSS exploit prediction: 0% (15th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-26466
Weakness: CWE-229
Affected product: Dronecode Px4 Drone Autopilot
Published: 2024-04-10
Last modified: 2026-06-17

Description

An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.

Frequently asked questions

What is CVE-2024-29460?: An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.
How severe is CVE-2024-29460?: CVE-2024-29460 has a CVSS 3.x base score of 6.6, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2024-29460 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (15th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-29460?: CVE-2024-29460 affects Dronecode Px4 Drone Autopilot. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-29460?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-29460 have an EU (EUVD) identifier?: Yes. CVE-2024-29460 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-26466.
When was CVE-2024-29460 published?: CVE-2024-29460 was published on 2024-04-10 and last updated on 2026-06-17.

References

https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can%27t-finish-mission/report-can%27t-finish-mission.md

Affected products (1)

cpe:2.3:a:dronecode:px4_drone_autopilot:1.14.0:-:*:*:*:*:*:*

More vulnerabilities in Dronecode Px4 Drone Autopilot

CVE-2026-26742 — High (CVSS 8.1): PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic.…
CVE-2026-26741 — High (CVSS 8.1): PX4 Autopilot versions 1.12.x through 1.15.x contain a logic flaw in the mode switching mechanism. When switching from…
CVE-2024-40427 — High (CVSS 7.9): Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this…
CVE-2026-32708 — High (CVSS 7.8): PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the Zenoh uORB subscriber allocates a stack…
CVE-2024-38952 — High (CVSS 7.5): PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at…
CVE-2021-46896 — High (CVSS 7.5): Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function…

All CVEs affecting Dronecode Px4 Drone Autopilot →

Other CWE-229 vulnerabilities

CVE-2025-7964 — Critical (CVSS 9.2): After receiving a malformed 802.15.4 MAC Data Request the Zigbee Coordinator sends a ‘network leave’ request to…
CVE-2024-39531 — High (CVSS 7.5): An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved…
CVE-2022-24412 — High (CVSS 7.5): Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network…
CVE-2022-22562 — High (CVSS 7.5): Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated…
CVE-2026-4736 — High (CVSS 7.3): Improper Handling of Values vulnerability in No-Chicken Echo-Mate…
CVE-2024-0607 — Medium (CVSS 6.6): A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function,…

Browse all CWE-229 vulnerabilities →