PT-2024-29482

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue is related to insecure permissions in the navigation2 component of ROS2, specifically affecting the nav2 costmap 2d. This allows an attacker to...

PT-2024-29477

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via a crafted script to the nav2 amcl. This is due to an Insecure Permissions vulnerability...

PT-2024-28280

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description A use-after-free vulnerability was discovered in the nav2 amcl process. This issue is triggered by remotely sending a request to change the value of...

CVE-2024-41644

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dynparamhandler component...

CVE-2024-41645

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2amcl...

CVE-2024-41650

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d...

CVE-2024-44856

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2smacplanner...

CVE-2024-41644: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dynparamhandler component...

PT-2024-31283

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version humble Description A NULL pointer dereference was discovered in the smoothPlan component of the navigation2 package. This issue can be exploited, but no details are provided abo...

CVE-2024-41646: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...

CVE-2024-41650: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d...

CVE-2024-41646

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...

CVE-2024-41648

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2regulatedpurepursuitcontroller...

PT-2024-29480

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via a crafted script to the nav2 regulated pure pursuit controller. This is due to an Insecure...

PT-2024-23691

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 versions ROS2-humble Description The issue allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2 bt navigator. This is due to an Insecure Permissions...

PT-2024-27791

Name of the Vulnerable Software and Affected Versions Open Robotic Operating System 2 ROS2 navigation2-ROS2-humble and navigation2-humble Description A Buffer Overflow issue exists in the navigation2 component of Open Robotic Operating System 2 ROS2, allowing a local attacker to execute arbitrary...

CVE-2024-38910: Use After Free

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble version was discovered to contain a use-after-free in the nav2amcl process. This vulnerability is triggered via sending a request to change dynamic parameters...

PT-2024-28276

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description A use-after-free vulnerability was discovered in the nav2 amcl process of Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble. This issue is triggered...