CVE-2024-25197

Summary

Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/ros-planning/navigation2/issues/3940
• https://github.com/ros-planning/navigation2/issues/3958
• https://github.com/ros-planning/navigation2/issues/3971
• https://github.com/ros-planning/navigation2/issues/3972

References

• https://github.com/ros-planning/navigation2/issues/3940
• https://github.com/ros-planning/navigation2/issues/3958
• https://github.com/ros-planning/navigation2/issues/3971
• https://github.com/ros-planning/navigation2/issues/3972

• ←Previous
• Next→