Robot Operating System vulnerabilities | LiveThreat CVE Feed

Product

Robot Operating System

by Openrobotics · last CVE Jul 17, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities32 In the news0 Timeline

Severity mix

Critical 17High 13Medium 1Low 1

Severity

All severities32 Critical17 High13 Medium1 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Robot Operating System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-39780	9.8	0%	Apr 2	A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically… Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-44852	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan() Affected: 2; 2
CVE-2024-41650	9.8	0%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41649	9.8	1%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41648	9.8	0%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41647	9.8	1%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41646	9.8	1%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41645	9.8	1%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the… Affected: 2; 2
CVE-2024-41644	9.8	1%	Dec 6	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_… Affected: 2; 2
CVE-2024-38927	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-38926	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-38925	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-38924	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-38923	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-38922	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process Affected: 2; 2
CVE-2024-38921	9.8	1%	Dec 6	Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process Affected: 2; 2
CVE-2024-25198	9.1	1%	Feb 20	Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions… Affected: 2
CVE-2020-10289	8.8	2%	Aug 20	Use of unsafe yaml load Affected: All versions, or not specified
CVE-2024-25199	8.1	1%	Feb 20	Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free Affected: 2
CVE-2025-3753	7.8	0%	Jul 17	Unsafe use of eval() method in rosbag tool Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-41921	7.8	0%	Jul 17	Unsafe use of eval() method in rostopic echo tool Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-41148	7.8	0%	Jul 17	Unsafe use of eval() method in rostopic hz tool Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-39835	7.8	0%	Jul 17	Unsafe use of eval() method in roslaunch tool Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-39289	7.8	0%	Jul 17	Unsafe use of eval() method in rosparam tool Affected: indigo_igloo; kinetic_kame; melodic_morenia; noetic_ninjemys
CVE-2024-30962	7.8	0%	Dec 5	Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code… Affected: 2; 2
CVE-2024-30961	7.8	0%	Dec 5	Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary… Affected: 2; 2
CVE-2024-44856	7.5	1%	Dec 6	Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner() Affected: 2; 2
CVE-2024-44855	7.5	1%	Dec 6	Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner() Affected: 2; 2
CVE-2024-44854	7.5	1%	Dec 6	Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan() Affected: 2; 2
CVE-2024-44853	7.5	1%	Dec 6	Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl() Affected: 2; 2
CVE-2024-25197	6.5	1%	Feb 20	Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at… Affected: 2
CVE-2024-25196	3.3	0%	Feb 20	Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process Affected: 2