Approved changes feed: RSS · Atom

cpe:2.3:o:open_robotics:ros2:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorOpen Robotics (52403d5a-ab0b-5cc6-8496-f9cdc3613b4e)
ProductRos2 (0cd2f123-d2c1-5b49-b66f-6b4f983c6071)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38920 vulnerable 2026-06-08 06:41:48.617216 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_beams` .
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:36:07.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38910 vulnerable 2026-06-08 06:41:48.615584 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:39:06.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37861 vulnerable 2026-06-08 06:39:48.142736 Details available
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
Published: 2024-12-05T00:00:00.000Z
Updated: 2024-12-06T19:46:42.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.