Medium severity4.2NVD Advisory· Published Feb 6, 2024· Updated Jun 17, 2026

CVE-2024-24254

Description

PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dronecode/Px4 Drone Autopilot
cpe:2.3:a:dronecode:px4_drone_autopilot:*:*:*:*:*:*:*:*
Range: <=1.14.0
Px4/Px4 Autopilotcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.14

Patches

Vulnerability mechanics

References

github.com/Drone-Lab/PX4-Autopilot/blob/report-can-not-pause-vulnerability/Multi-Threaded%20Race%20Condition%20bug%20found%20in%20PX4%20cause%20drone%20can%20not%20PAUSE.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.273
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000