NA
Product
Nav2
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 1
Watch
Add Nav2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-26011 | 9.8 | Feb 12 | Critical Heap Out-of-bounds Access in `pf_cluster_stats()` via Malicious /initialpose Covariance -- Potential Remote Code Execution Affected: through 1.3.11 |
| CVE-2024-25198 | 9.1 | Feb 20 | Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions… Affected: 1.1.0 through 1.1.17 |
| CVE-2024-25199 | 8.1 | Feb 20 | Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free Affected: 1.1.0 through 1.1.17 |
| CVE-2024-25197 | 6.5 | Feb 20 | Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at… Affected: 1.1.0 through 1.1.17 |
| CVE-2024-25196 | 3.3 | Feb 20 | Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process Affected: 1.1.0 through 1.1.17 |
Showing 5