168 matches found
CVE-2024-30964: Improper Control of Generation of Code
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initialposesub thread created by nav2btnavigator...
CVE-2024-30963
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...
CVE-2024-30962
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...
CVE-2024-37861
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-25196
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
Design/Logic Flaw
Inappropriate pointer order of laserscanfilter.reset and tflistener.reset amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...
Null pointer dereference
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
CVE-2024-25196
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...
CVE-2024-25196
A buffer overflow vulnerability exists in the nav2_controller process of Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions. The flaw is triggered by providing a crafted .yaml file , which leads to a buffer overflow during processing. Practical consequences include potential...
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
CVE-2024-25198
Inappropriate pointer order of laserscanfilter.reset and tflistener.reset amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...
PT-2024-20811 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is related to an inappropriate pointer order of map sub and map freemap in the amcl node.cpp file, leading to a use-after-free. Recommendations: For...
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
CVE-2024-25199
The Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are vulnerable to a use-after-free condition. The root cause is an inappropriate pointer order involving map_sub_ and map_free(map_) within the amcl_node.cpp file. This flaw can lead to memory corruption or instability. ...
CVE-2024-25197
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are vulnerable to a NULL pointer dereference within the isCurrent() function located at /src/layered_costmap.cpp. This flaw impacts the navigation capabilities of the system. As a temporary workaround, it is recommended to d...
CVE-2024-25198
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by a use-after-free vulnerability in the amcl_node.cpp file. The root cause is an inappropriate pointer order during the execution of laser_scan_filter_.reset() and tf_listener_.reset(). To remediate this, it is...
CVE-2024-25196
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...