Priority HIGH 82
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executor_thread_.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00696 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 82
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_dwb_controller.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00696 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 82
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00696 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 82
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00696 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 82
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 82
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 82
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00601 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 81
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00604 · Published 2024-12-06 · No fix listed CWE-763
Priority HIGH 81
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00587 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 81
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00587 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 81
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00587 · Published 2024-12-06 · No fix listed CWE-416
Priority HIGH 75
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_costmap_2d.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0048 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 75
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0048 · Published 2024-12-06 · No fix listed CWE-281
Priority HIGH 72
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2024-12-06 · No fix listed CWE-476
Priority HIGH 72
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2024-12-06 · No fix listed CWE-476
Priority HIGH 72
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2024-12-06 · No fix listed CWE-476
Priority HIGH 72
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0059 · Published 2024-12-06 · No fix listed CWE-476
Priority HIGH 70
Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.00576 · Published 2024-02-20 · No fix listed CWE-416
Priority HIGH 69
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0029 · Published 2024-12-05 · No fix listed CWE-94
Priority HIGH 69
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in n…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2024-12-05 · No fix listed CWE-94
Priority MEDIUM 50
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_mppi_controller.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00696 · Published 2024-12-06 · No fix listed CWE-732
Priority MEDIUM 49
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00285 · Published 2024-02-20 · No fix listed CWE-120
Priority MEDIUM 44
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00588 · Published 2024-12-06 · No fix listed CWE-120
Priority MEDIUM 44
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00913 · Published 2020-10-13 · No fix listed CWE-190
Priority MEDIUM 43
A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distribut…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00404 · Published 2025-04-02 · No fix listed CWE-20
Load more