Security Advisory
CVE-2026-38971
9.1
CRITICAL
Vulnerability Description
ardupilot through Plane-4.6.3 was found to contain an out-of-bounds read issue in libraries/GCS_MAVLink/GCS_serial_control.cpp in GCS_MAVLINK::handle_serial_control().
Published Date
July 2, 2026
Official Source
NIST NVD Advisory