CVE-2024-30963

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-37863

CVE-2024-37863 affects Open Robotics ROS 2 (ROS2) and Nav2 humble, with a buffer overflow in the nav2_amcl process triggered by a crafted YAML file. Public sources describe vulnerable components and the advisory mentions a high-severity impact (NVD metrics show CVSS v3.1: 9.8, network attack vect...

CVE-2024-37861

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-37863

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-30964

CVE-2024-30964 affects ROS2 navigation2 (navigation2-humble) with an Insecure Permissions flaw in the nav2_bt_navigator’s initial_pose_sub thread. A local attacker could execute arbitrary code, as the vulnerability allows local code execution with low privileges and no user interaction required. ...

CVE-2024-30962

The vulnerability CVE-2024-30962 affects Open Robotics ROS 2 navigation2 (navigation2-humble) with a buffer overflow in the nav2_amcl process. A local attacker can exploit this to execute arbitrary code. The issue is documented across multiple sources (e.g., NVD, Red Hat, CNNVD, CIRCL) with a CVS...

CVE-2024-38910

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble version was discovered to contain a use-after-free in the nav2amcl process. This vulnerability is triggered via sending a request to change dynamic parameters...

CVE-2024-29452

CVE-2024-29452 relates to ROS2 Humble Hawksbill, with insecure deserialization vulnerabilities in ROS2 Humble Hawksbill versions 2 and 3. The issue enables an attacker to execute arbitrary code and obtain sensitive information via crafted input affecting the Data Serialization and Deserialization...

CVE-2024-29449

CVE-2024-29449 is not a publicly usable vulnerability; connected PT-2024-22905 reports a ROS2 Humble Hawksbill issue where cleartext transmission between ROS2 nodes enables potential MITM access to sensitive data. Affected: ROS2 Humble Hawksbill version 2. Root cause: unencrypted inter-node commu...

CVE-2024-29454

CVE-2024-29454 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.

CVE-2024-29450

The published details in PT-2024-22907 indicate a vulnerability affecting ROS2 Humble Hawksbill versions 2, located in the permission and access control components. The issue could allow an attacker to execute arbitrary code, cause a denial of service, escalate privileges, and obtain sensitive in...

CVE-2024-29455

Consolidated data shows a concrete issue in ROS2 Humble Hawksbill: an arbitrary file upload vulnerability in the file upload mechanism affecting versions 2, enabling potential arbitrary code execution, denial of service, and exposure of sensitive information. The root cause and exact affected fil...

CVE-2024-29448

ROS2 Humble Hawksbill (versions 2) is affected by a reported buffer overflow in the C++ components, which could allow arbitrary code execution or a denial of service through improper handling of arrays or strings. Remediation is to update to a version that includes the fix for this issue to mitig...

CVE-2024-30718

CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30708

CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.

CVE-2024-30711

CVE-2024-30711 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30710

CVE-2024-30710 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-30712

CVE-2024-30712 entry is rejected/not used; this ID does not represent an active vulnerability.

CVE-2024-30715

CVE-2024-30715 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2024-30721

CVE-2024-30721 is rejected; this candidate withdrawn and not an active vulnerability entry.