CVE-2026-86097

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-86097
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86097.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-86097
Published
2026-09-04T22:38:47.363Z
Modified
2026-09-06T08:01:51.917504Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select
Details

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile() and paramsetbackupfile() functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 shell to trigger the crash.

Database specific 
{
    "cwe_ids": [
        "CWE-476"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86097.json"
}
References

Affected packages

Git / github.com/px4/px4-autopilot

Affected ranges

Type
GIT
Repo
https://github.com/px4/px4-autopilot
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d6f12ad1c4f70ad3230afd7d86e971421e02fef4
Fixed
02eabc08c9b8cb1de525070cacb7ea0c495136f6
Database specific
Show details 
{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.17.0"
        }
    ]
}

Affected versions

v1.*
v1.0.0-rc1
v1.0.0-rc2
v1.0.0-rc3
v1.0.0beta2
v1.0.0rc10
v1.0.0rc12
v1.0.0rc7
v1.0.0rc8
v1.0.0rc9
v1.1.0beta1
v1.1.0beta3
v1.1.1
v1.1.2
v1.1.3
v1.10.0-beta1
v1.10.0-beta2
v1.10.0-beta3
v1.10.0-beta4
v1.11.0-beta1
v1.11.0-beta2
v1.11.0-rc1
v1.11.0-rc2
v1.11.0-rc3
v1.12.0
v1.12.0-beta2
v1.12.0-beta3
v1.12.0-beta4
v1.12.0-beta5
v1.12.0-beta6
v1.12.0-rc1
v1.13.0-alpha1
v1.13.0-beta1
v1.14.0-beta1
v1.14.0-beta2
v1.15.0-alpha1
v1.15.0-beta1
v1.16.0-alpha1
v1.16.0-alpha2
v1.16.0-beta1
v1.16.0-rc1
v1.17.0-alpha1
v1.17.0-beta1
v1.17.0-rc1
v1.17.0-rc2
v1.18-beta1
v1.18.0-alpha1
v1.18.0-beta1
v1.3.0rc1
v1.3.0rc2
v1.3.0rc3
v1.3.2
v1.4.0rc1
v1.4.0rc2
v1.4.0rc3
v1.4.0rc4
v1.4.1
v1.4.1rc1
v1.4.1rc2
v1.4.1rc3
v1.4.1rc4
v1.4.2
v1.4.3
v1.4.4rc1
v1.5.0
v1.5.1
v1.5.1rc2
v1.5.1rc3
v1.5.1rc4
v1.5.2
v1.6.0-rc2
v1.6.0-rc3
v1.6.0-rc4
v1.6.0rc1
v1.6.2
v1.6.4
v1.6.5
v1.7.0
v1.7.0-rc0
v1.7.0-rc1
v1.7.0-rc2
v1.7.0-rc3
v1.7.0-rc4
v1.7.1
v1.7.2
v1.7.3
v1.7.3beta
v1.7.4beta
v1.8.0
v1.8.0-beta1
v1.8.0-beta2
v1.8.0-rc0
v1.9.0
v1.9.0-alpha
v1.9.0-beta1
v1.9.0-beta2
v1.9.0-beta3
v1.9.0-rc0
v1.9.0-rc1
v1.9.0-rc2

Database specific

vanir_signatures 
[
    {
        "target": {
            "file": "src/lib/parameters/parameters.cpp"
        },
        "deprecated": false,
        "id": "CVE-2026-86097-175d5591",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "270475071476562351392611920490340275884",
                "151132239931009706457288745984964024375",
                "116720059911383318691539455464846786917",
                "31966251570380257606770789844607771781",
                "94526279510536422786127749559147243472",
                "95589480793697915804203143825861432481",
                "187387201877253163250220251037019566550",
                "4408318793240027540021566942526412328"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6"
    },
    {
        "target": {
            "file": "src/lib/parameters/parameters.cpp",
            "function": "param_set_default_file"
        },
        "deprecated": false,
        "id": "CVE-2026-86097-1c6148c5",
        "signature_version": "v1",
        "digest": {
            "function_hash": "208912585240704587099519171113211980068",
            "length": 474.0
        },
        "signature_type": "Function",
        "source": "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6"
    },
    {
        "target": {
            "file": "src/lib/parameters/parameters.cpp",
            "function": "param_set_backup_file"
        },
        "deprecated": false,
        "id": "CVE-2026-86097-3e450065",
        "signature_version": "v1",
        "digest": {
            "function_hash": "195365897410435578678865987276721141189",
            "length": 428.0
        },
        "signature_type": "Function",
        "source": "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86097.json"
vanir_signatures_modified 
"2026-09-06T08:01:51Z"