CVE-2026-86097

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-86097
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86097.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-86097
Published
2026-09-04T22:38:47Z
Modified
2026-09-12T08:07:31Z
Severity
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select
Details

PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 shell to trigger the crash.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-476"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86097.json"
}
References

Affected packages

Git / github.com/px4/px4-autopilot

Affected ranges

Type
GIT
Repo
https://github.com/px4/px4-autopilot
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d6f12ad1c4f70ad3230afd7d86e971421e02fef4
Fixed
02eabc08c9b8cb1de525070cacb7ea0c495136f6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.17.0"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

v1.*
v1.0.0-rc1
v1.0.0-rc2
v1.0.0-rc3
v1.0.0beta2
v1.0.0rc10
v1.0.0rc12
v1.0.0rc7
v1.0.0rc8
v1.0.0rc9
v1.1.0beta1
v1.1.0beta3
v1.1.1
v1.1.2
v1.1.3
v1.10.0-beta1
v1.10.0-beta2
v1.10.0-beta3
v1.10.0-beta4
v1.11.0-beta1
v1.11.0-beta2
v1.11.0-rc1
v1.11.0-rc2
v1.11.0-rc3
v1.12.0
v1.12.0-beta2
v1.12.0-beta3
v1.12.0-beta4
v1.12.0-beta5
v1.12.0-beta6
v1.12.0-rc1
v1.13.0-alpha1
v1.13.0-beta1
v1.14.0-beta1
v1.14.0-beta2
v1.15.0-alpha1
v1.15.0-beta1
v1.16.0-alpha1
v1.16.0-alpha2
v1.16.0-beta1
v1.16.0-rc1
v1.17.0-alpha1
v1.17.0-beta1
v1.17.0-rc1
v1.17.0-rc2
v1.18-beta1
v1.18.0-alpha1
v1.18.0-beta1
v1.3.0rc1
v1.3.0rc2
v1.3.0rc3
v1.3.2
v1.4.0rc1
v1.4.0rc2
v1.4.0rc3
v1.4.0rc4
v1.4.1
v1.4.1rc1
v1.4.1rc2
v1.4.1rc3
v1.4.1rc4
v1.4.2
v1.4.3
v1.4.4rc1
v1.5.0
v1.5.1
v1.5.1rc2
v1.5.1rc3
v1.5.1rc4
v1.5.2
v1.6.0-rc2
v1.6.0-rc3
v1.6.0-rc4
v1.6.0rc1
v1.6.2
v1.6.4
v1.6.5
v1.7.0
v1.7.0-rc0
v1.7.0-rc1
v1.7.0-rc2
v1.7.0-rc3
v1.7.0-rc4
v1.7.1
v1.7.2
v1.7.3
v1.7.3beta
v1.7.4beta
v1.8.0
v1.8.0-beta1
v1.8.0-beta2
v1.8.0-rc0
v1.9.0
v1.9.0-alpha
v1.9.0-beta1
v1.9.0-beta2
v1.9.0-beta3
v1.9.0-rc0
v1.9.0-rc1
v1.9.0-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86097.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "270475071476562351392611920490340275884",
                "151132239931009706457288745984964024375",
                "116720059911383318691539455464846786917",
                "31966251570380257606770789844607771781",
                "94526279510536422786127749559147243472",
                "95589480793697915804203143825861432481",
                "187387201877253163250220251037019566550",
                "4408318793240027540021566942526412328"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-86097-175d5591",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6",
        "target":  {
            "file":  "src/lib/parameters/parameters.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "208912585240704587099519171113211980068",
            "length":  474
        },
        "id":  "CVE-2026-86097-1c6148c5",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6",
        "target":  {
            "file":  "src/lib/parameters/parameters.cpp",
            "function":  "param_set_default_file"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "195365897410435578678865987276721141189",
            "length":  428
        },
        "id":  "CVE-2026-86097-3e450065",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/px4/px4-autopilot/commit/02eabc08c9b8cb1de525070cacb7ea0c495136f6",
        "target":  {
            "file":  "src/lib/parameters/parameters.cpp",
            "function":  "param_set_backup_file"
        }
    }
]
vanir_signatures_modified 
"2026-09-12T08:07:31Z"