← Back

CVE-2024-25196

nvd nist
Published: Feb 20, 2024Modified: Apr 2, 2025

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Exploitability: 1.8 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.

Affected (2)

Opennav
1 product
Nav2
Openrobotics
1 product
Robot Operating System
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Nav2
From 1.1.0 to 1.1.17
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Robot Operating System
Version 2 humble

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (6)

Source: cve@mitre.org
ExploitIssue Tracking
Source: cve@mitre.org
ExploitIssue Tracking
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.