https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3753.htmlhttps://patchthecve.com/cve/CVE-2025-3753.htmlWed, 17 Jun 2026 09:20:36 +0000HIGH 7.8: A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. Thishttps://patchthecve.com/cve/CVE-2024-41921.htmlhttps://patchthecve.com/cve/CVE-2024-41921.htmlWed, 17 Jun 2026 07:48:27 +0000HIGH 7.8: A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python exhttps://patchthecve.com/cve/CVE-2024-41148.htmlhttps://patchthecve.com/cve/CVE-2024-41148.htmlWed, 17 Jun 2026 07:47:22 +0000HIGH 7.8: A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python exprehttps://patchthecve.com/cve/CVE-2024-39835.htmlhttps://patchthecve.com/cve/CVE-2024-39835.htmlWed, 17 Jun 2026 07:42:53 +0000HIGH 7.8: A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the https://patchthecve.com/cve/CVE-2024-39289.htmlhttps://patchthecve.com/cve/CVE-2024-39289.htmlWed, 17 Jun 2026 07:41:39 +0000HIGH 7.8: A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval() function to process unsanitized, user-supplied parameter values via special converters fhttps://patchthecve.com/cve/CVE-2024-39780.htmlhttps://patchthecve.com/cve/CVE-2024-39780.htmlWed, 17 Jun 2026 07:42:47 +0000HIGH 7.8: A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() functhttps://patchthecve.com/cve/CVE-2024-44856.htmlhttps://patchthecve.com/cve/CVE-2024-44856.htmlWed, 17 Jun 2026 07:53:11 +0000HIGH 7.5: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().https://patchthecve.com/cve/CVE-2024-44855.htmlhttps://patchthecve.com/cve/CVE-2024-44855.htmlWed, 17 Jun 2026 07:53:11 +0000HIGH 7.5: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().https://patchthecve.com/cve/CVE-2024-44854.htmlhttps://patchthecve.com/cve/CVE-2024-44854.htmlWed, 17 Jun 2026 07:53:11 +0000HIGH 7.5: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan().https://patchthecve.com/cve/CVE-2024-44853.htmlhttps://patchthecve.com/cve/CVE-2024-44853.htmlWed, 17 Jun 2026 07:53:10 +0000HIGH 7.5: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl().https://patchthecve.com/cve/CVE-2024-44852.htmlhttps://patchthecve.com/cve/CVE-2024-44852.htmlWed, 17 Jun 2026 07:53:10 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().https://patchthecve.com/cve/CVE-2024-41650.htmlhttps://patchthecve.com/cve/CVE-2024-41650.htmlWed, 17 Jun 2026 07:47:59 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_costmap_2d.https://patchthecve.com/cve/CVE-2024-41649.htmlhttps://patchthecve.com/cve/CVE-2024-41649.htmlWed, 17 Jun 2026 07:47:59 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executor_thread_.https://patchthecve.com/cve/CVE-2024-41648.htmlhttps://patchthecve.com/cve/CVE-2024-41648.htmlWed, 17 Jun 2026 07:47:58 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.https://patchthecve.com/cve/CVE-2024-41647.htmlhttps://patchthecve.com/cve/CVE-2024-41647.htmlWed, 17 Jun 2026 07:47:58 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_mppi_controller.https://patchthecve.com/cve/CVE-2024-41646.htmlhttps://patchthecve.com/cve/CVE-2024-41646.htmlWed, 17 Jun 2026 07:47:58 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_dwb_controller.https://patchthecve.com/cve/CVE-2024-41645.htmlhttps://patchthecve.com/cve/CVE-2024-41645.htmlWed, 17 Jun 2026 07:47:58 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl.https://patchthecve.com/cve/CVE-2024-41644.htmlhttps://patchthecve.com/cve/CVE-2024-41644.htmlWed, 17 Jun 2026 07:47:58 +0000CRITICAL 9.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component.https://patchthecve.com/cve/CVE-2024-38927.htmlhttps://patchthecve.com/cve/CVE-2024-38927.htmlWed, 17 Jun 2026 07:41:16 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter `/amcl do_beamskip`.https://patchthecve.com/cve/CVE-2024-38926.htmlhttps://patchthecve.com/cve/CVE-2024-38926.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter `/amcl z_short`.https://patchthecve.com/cve/CVE-2024-38925.htmlhttps://patchthecve.com/cve/CVE-2024-38925.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_max` .https://patchthecve.com/cve/CVE-2024-38924.htmlhttps://patchthecve.com/cve/CVE-2024-38924.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl laser_model_type` .https://patchthecve.com/cve/CVE-2024-38923.htmlhttps://patchthecve.com/cve/CVE-2024-38923.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl odom_frame_id` .https://patchthecve.com/cve/CVE-2024-38922.htmlhttps://patchthecve.com/cve/CVE-2024-38922.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /initialpose.https://patchthecve.com/cve/CVE-2024-38921.htmlhttps://patchthecve.com/cve/CVE-2024-38921.htmlWed, 17 Jun 2026 07:41:15 +0000CRITICAL 9.8: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_rand ` .https://patchthecve.com/cve/CVE-2024-30962.htmlhttps://patchthecve.com/cve/CVE-2024-30962.htmlWed, 17 Jun 2026 07:27:33 +0000HIGH 7.8: Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl processhttps://patchthecve.com/cve/CVE-2024-30961.htmlhttps://patchthecve.com/cve/CVE-2024-30961.htmlWed, 17 Jun 2026 07:27:33 +0000HIGH 7.8: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator.