Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-37860

No fix known EPSS <1%CVSS 7.3

Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process

Published 2024-12-05 · CVE record · OSV

Products: open_robotics ros2_navigation2, open_robotics ros2_humble, open_robotics nav2_humble