CVE-2024-37863

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-30963

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-37861

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-37862

Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2planner process...

CVE-2024-30964

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initialposesub thread created by nav2btnavigator...

CVE-2024-30961

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

PT-2024-27794 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is a buffer overflow vulnerability triggered by sending a crafted .yaml file via the nav2 amcl process. Recommendations: For Open Robotics Robotic...

CVE-2024-30961: Improper Control of Generation of Code

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

CVE-2024-30963: Improper Control of Generation of Code

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-38910: Use After Free

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble version was discovered to contain a use-after-free in the nav2amcl process. This vulnerability is triggered via sending a request to change dynamic parameters...

CVE-2024-30962: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

CVE-2024-30964

An Insecure Permissions vulnerability exists in the Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble components. A local attacker can exploit this flaw to execute arbitrary code via the initial_pose_sub thread created by the nav2_bt_navigator functi...

CVE-2024-37863: Buffer Copy without Checking Size of Input

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-30961

CVE-2024-30961 affects Open Robotics ROS2 Navigation2 (navigation2-humble and related nav2_bt_navigator). The vulnerability is described as an insecure permissions issue that enables a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator. CVSS data indicate...

CVE-2024-30962

The vulnerability CVE-2024-30962 affects Open Robotics ROS 2 navigation2 (navigation2-humble) with a buffer overflow in the nav2_amcl process. A local attacker can exploit this to execute arbitrary code. The issue is documented across multiple sources (e.g., NVD, Red Hat, CNNVD, CIRCL) with a CVS...

CVE-2024-38920

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are vulnerable to a use-after-free vulnerability in the nav2_amcl process. This issue is triggered by remotely sending a request to modify the value of the dynamic parameter /amcl max_beams. Exploitation could lead to high i...

CVE-2024-38910

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble version was discovered to contain a use-after-free in the nav2amcl process. This vulnerability is triggered via sending a request to change dynamic parameters...

CVE-2024-38910

The Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by a use-after-free vulnerability in the nav2_amcl process. This flaw is triggered when sending a request to change dynamic parameters . While the vulnerability could lead to high availability impact as indi...

PT-2024-23691

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 versions ROS2-humble Description The issue allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2 bt navigator. This is due to an Insecure Permissions...

PT-2024-27792 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is a buffer overflow that occurs via the nav2 amcl process. This is triggered by sending a crafted .yaml file. Recommendations: For Open Robotics...