Robot Operating System
Openrobotics · 32 CVEs
Unsafe use of eval() method in rosbag tool
Jul 17, 2025
Unsafe use of eval() method in rostopic echo tool
Jul 17, 2025
Unsafe use of eval() method in rostopic hz tool
Jul 17, 2025
Unsafe use of eval() method in roslaunch tool
Jul 17, 2025
Unsafe use of eval() method in rosparam tool
Jul 17, 2025
Use of unsafe yaml load in dynparam
Apr 2, 2025
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference…
Dec 6, 2024
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference…
Dec 6, 2024
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference…
Dec 6, 2024
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference…
Dec 6, 2024
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation v…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an atta…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in th…
Dec 6, 2024
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free vi…
Dec 6, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-3753 | Unsafe use of eval() method in rosbag tool | HIGH | 0.19% | Jul 17, 2025 |
| CVE-2024-41921 | Unsafe use of eval() method in rostopic echo tool | HIGH | 0.19% | Jul 17, 2025 |
| CVE-2024-41148 | Unsafe use of eval() method in rostopic hz tool | HIGH | 0.19% | Jul 17, 2025 |
| CVE-2024-39835 | Unsafe use of eval() method in roslaunch tool | HIGH | 0.18% | Jul 17, 2025 |
| CVE-2024-39289 | Unsafe use of eval() method in rosparam tool | HIGH | 0.18% | Jul 17, 2025 |
| CVE-2024-39780 | Use of unsafe yaml load in dynparam | CRITICAL | 0.40% | Apr 2, 2025 |
| CVE-2024-44856 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner(). | HIGH | 0.59% | Dec 6, 2024 |
| CVE-2024-44855 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner(). | HIGH | 0.59% | Dec 6, 2024 |
| CVE-2024-44854 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan(). | HIGH | 0.59% | Dec 6, 2024 |
| CVE-2024-44853 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl(). | HIGH | 0.59% | Dec 6, 2024 |
| CVE-2024-44852 | Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::… | CRITICAL | 0.60% | Dec 6, 2024 |
| CVE-2024-41650 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.48% | Dec 6, 2024 |
| CVE-2024-41649 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.70% | Dec 6, 2024 |
| CVE-2024-41648 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.48% | Dec 6, 2024 |
| CVE-2024-41647 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.70% | Dec 6, 2024 |
| CVE-2024-41646 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.70% | Dec 6, 2024 |
| CVE-2024-41645 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a cra… | CRITICAL | 0.70% | Dec 6, 2024 |
| CVE-2024-41644 | Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the d… | CRITICAL | 0.70% | Dec 6, 2024 |
| CVE-2024-38927 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.59% | Dec 6, 2024 |
| CVE-2024-38926 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.59% | Dec 6, 2024 |
| CVE-2024-38925 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.59% | Dec 6, 2024 |
| CVE-2024-38924 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.55% | Dec 6, 2024 |
| CVE-2024-38923 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.55% | Dec 6, 2024 |
| CVE-2024-38922 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability… | CRITICAL | 0.59% | Dec 6, 2024 |
| CVE-2024-38921 | Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerabil… | CRITICAL | 0.60% | Dec 6, 2024 |
Showing 1 to 25 of 32 CVEs