CVE-2024-38925

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter/amcl zmax...

PT-2024-29482

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue is related to insecure permissions in the navigation2 component of ROS2, specifically affecting the nav2 costmap 2d. This allows an attacker to...

PT-2024-29476

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via the dyn param handler component. This is due to an insecure permissions vulnerability in the...

PT-2024-29477

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via a crafted script to the nav2 amcl. This is due to an Insecure Permissions vulnerability...

PT-2024-31283

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version humble Description A NULL pointer dereference was discovered in the smoothPlan component of the navigation2 package. This issue can be exploited, but no details are provided abo...

CVE-2024-41644

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dynparamhandler component...

PT-2024-28280

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description A use-after-free vulnerability was discovered in the nav2 amcl process. This issue is triggered by remotely sending a request to change the value of...

CVE-2024-41650

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d...

CVE-2024-41645

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2amcl...

CVE-2024-44856

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2smacplanner...

CVE-2024-44855

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2navfnplanner...

CVE-2024-41644: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dynparamhandler component...

CVE-2024-41650: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d...

CVE-2024-41646: Improper Preservation of Permissions

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...

CVE-2024-41646

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2dwbcontroller...

CVE-2024-41648

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2regulatedpurepursuitcontroller...

PT-2024-29480

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via a crafted script to the nav2 regulated pure pursuit controller. This is due to an Insecure...

CVE-2024-38926

CVE-2024-38926 affects the ROS 2 ecosystem (ROS 2 Humble and Nav2 Humble) and is due to a use-after-free in the nav2_amcl process. The vulnerability is triggered by remotely sending a request to change the dynamic-parameter /amcl z_short, indicating a remote-access impact vector. The CVSS v3.1 me...

CVE-2024-30961

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

PT-2024-27791

Name of the Vulnerable Software and Affected Versions Open Robotic Operating System 2 ROS2 navigation2-ROS2-humble and navigation2-humble Description A Buffer Overflow issue exists in the navigation2 component of Open Robotic Operating System 2 ROS2, allowing a local attacker to execute arbitrary...