Approved changes feed: RSS · Atom

cpe:2.3:o:open_robotics:ros2_navigation2:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOpen Robotics (52403d5a-ab0b-5cc6-8496-f9cdc3613b4e)
ProductRos2 Navigation2 (6df5c0c7-94d1-53a7-8c8d-f78c1dfd6439)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37860 vulnerable 2026-06-08 06:39:48.139327 Details available
Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:54:23.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30964 vulnerable 2026-06-08 06:35:30.762260 Details available
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:58:12.809Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30963 vulnerable 2026-06-08 06:35:30.759904 Details available
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T20:04:03.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30962 vulnerable 2026-06-08 06:35:30.758281 Details available
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
Published: 2024-12-05T00:00:00.000Z
Updated: 2025-01-09T16:40:54.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.