Filtered by vendor Open Robotics Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-38910 1 Open Robotics 2 Nav2 Humble, Ros2 2024-12-06 7.5 High
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
CVE-2024-37863 1 Open Robotics 2 Nav2 Humble, Robotics Operating System 2024-12-06 9.8 Critical
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
CVE-2024-37861 1 Open Robotics 2 Nav2 Humble, Ros2 2024-12-06 9.8 Critical
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
CVE-2024-37860 1 Open Robotics 3 Nav2 Humble, Ros2 Humble, Ros2 Navigation2 2024-12-06 7.3 High
Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
CVE-2024-30964 1 Open Robotics 3 Nav2 Humble, Ros2 Humble, Ros2 Navigation2 2024-12-06 7.8 High
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator
CVE-2024-30963 1 Open Robotics 3 Nav2 Humble, Ros2 Humble, Ros2 Navigation2 2024-12-06 7.8 High
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.
CVE-2024-38920 1 Open Robotics 2 Nav2 Humble, Ros2 2024-12-06 9.1 Critical
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_beams` .