Approved changes feed: RSS · Atom

cpe:2.3:o:openrobotics:robot_operating_system:2:humble:*:*:*:*:*:*

part: o version: 2 update: humble

VendorOpenrobotics (a5b2c799-61c2-5657-93f5-fde4560d0687)
ProductRobot Operating System (5b36adaf-5fab-5f1e-9275-ccafee54a5b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/ros purl2cpe 2026-06-01 10:18:20.633288
pkg:github/ros-infrastructure/www.ros.org purl2cpe 2026-06-01 10:18:20.633290
pkg:github/ros/ros purl2cpe 2026-06-01 10:18:20.633292

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25199 vulnerable 2026-06-08 06:31:22.618961 Details available
Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
Published: 2024-02-20T00:00:00.000Z
Updated: 2024-08-29T13:39:39.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25198 vulnerable 2026-06-08 06:31:22.618261 Details available
Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
Published: 2024-02-20T00:00:00.000Z
Updated: 2024-08-01T23:36:21.763Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25197 vulnerable 2026-06-08 06:31:22.616084 Details available
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.
Published: 2024-02-20T00:00:00.000Z
Updated: 2024-10-29T20:06:53.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25196 vulnerable 2026-06-08 06:31:22.615360 Details available
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.
Published: 2024-02-20T00:00:00.000Z
Updated: 2024-08-15T13:48:00.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.