Open Robotics vulnerabilities
We track 8 vulnerabilities in Open Robotics products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2024.
Latest Open Robotics vulnerabilities
- 9.1 Critical severity
nav2_humble: Use After Free
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_be
- 7.5 High severity
ros2: Use After Free
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
- 9.8 Critical severity
robotics_operating_system: Buffer Copy without Checking Size of Input
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
- 9.8 Critical severity
ros2: Buffer Copy without Checking Size of Input
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
- 7.3 High severity
ros2_navigation2: Improper Control of Generation of Code
Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
- 7.8 High severity
ros2_navigation2: Improper Control of Generation of Code
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator
- 7.8 High severity
ros2_navigation2: Improper Control of Generation of Code
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.
- 7.8 High severity
ros2_navigation2: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process