Vulnerabilities > Openrobotics > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-12-06 CVE-2024-41647 Unspecified vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_mppi_controller.
network
low complexity
openrobotics
critical
9.8
2024-12-06 CVE-2024-41648 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41649 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executor_thread_.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41650 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_costmap_2d.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-44852 Release of Invalid Pointer or Reference vulnerability in Openrobotics Robot Operating System 2
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().
network
low complexity
openrobotics CWE-763
critical
9.8