https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-26011.htmlhttps://patchthecve.com/cve/CVE-2026-26011.htmlWed, 17 Jun 2026 10:25:35 +0000CRITICAL 9.8: navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL's particle filter clustering logic. By publishing a single crafted geometry_msgs/PoseWithCovarianceStamped message with extreme covariance values to thhttps://patchthecve.com/cve/CVE-2024-25199.htmlhttps://patchthecve.com/cve/CVE-2024-25199.htmlWed, 17 Jun 2026 07:15:41 +0000HIGH 8.1: Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.https://patchthecve.com/cve/CVE-2024-25198.htmlhttps://patchthecve.com/cve/CVE-2024-25198.htmlWed, 17 Jun 2026 07:15:41 +0000CRITICAL 9.1: Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.https://patchthecve.com/cve/CVE-2024-25197.htmlhttps://patchthecve.com/cve/CVE-2024-25197.htmlWed, 17 Jun 2026 07:15:40 +0000MEDIUM 6.5: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.https://patchthecve.com/cve/CVE-2024-25196.htmlhttps://patchthecve.com/cve/CVE-2024-25196.htmlWed, 17 Jun 2026 07:15:40 +0000LOW 3.3: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.