Approved changes feed: RSS · Atom

cpe:2.3:o:open_robotics:nav2_humble:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOpen Robotics (52403d5a-ab0b-5cc6-8496-f9cdc3613b4e)
ProductNav2 Humble (c313b6b1-6f1d-57d3-96ac-8725c5435168)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38920 vulnerable 2026-06-08 06:41:48.617178 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_beams` .
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:36:07.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38910 vulnerable 2026-06-08 06:41:48.616765 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:39:06.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37863 vulnerable 2026-06-08 06:39:48.147432 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:42:57.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37861 vulnerable 2026-06-08 06:39:48.142792 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:46:42.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37860 vulnerable 2026-06-08 06:39:48.141121 Details available
Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:54:23.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30964 vulnerable 2026-06-08 06:35:30.762323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30963 vulnerable 2026-06-08 06:35:30.761686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.