CVE-2024-30963

EUVD-2024-28881
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 43%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
open_roboticsros2_navigation2
𝑥
≤ *
ADP
open_roboticsros2_humble
𝑥
≤ *
ADP
open_roboticsnav2_humble
𝑥
≤ *
ADP
Common Weakness Enumeration
References
https://github.com/GoesM/ROS-CVE-CNVDs
https://github.com/ros-planning/navigation2/issues/4157