medium6.5
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at…
Impact
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opennav | Nav2 | from 1.1.0 through 1.1.17 |
| Openrobotics | Robot Operating System | Version 2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ros-planning/navigation2/issues/3940
- https://github.com/ros-planning/navigation2/issues/3958
- https://github.com/ros-planning/navigation2/issues/3971
- https://github.com/ros-planning/navigation2/issues/3972
- https://github.com/ros-planning/navigation2/issues/3940
- https://github.com/ros-planning/navigation2/issues/3958
- https://github.com/ros-planning/navigation2/issues/3971
- https://github.com/ros-planning/navigation2/issues/3972