ros2 vulnerabilities

3 known vulnerabilities in ros2 from Open Robotics. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  nav2_humble: Use After Free

  CVE-2024-38920Dec 5, 2024Open Robotics

  Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_be

• 7.5 High severity

  ros2: Use After Free

  CVE-2024-38910Dec 5, 2024Open Robotics

  Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.

• 9.8 Critical severity

  ros2: Buffer Copy without Checking Size of Input

  CVE-2024-37861Dec 5, 2024Open Robotics

  Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.