High severity7.3NVD Advisory· Published Dec 5, 2024· Updated Jun 17, 2026

CVE-2024-37860

Description

Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ros Navigation/Navigation2references2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Open Robotic Operating System/ROS2 navigation2llm-create

Patches

Vulnerability mechanics

References

github.com/ros-navigation/navigation2/issues/4005nvd
github.com/ros-navigation/navigation2/issues/4336nvd
github.com/ros-navigation/navigation2/issues/4339nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000