Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
| Link | Tags |
|---|---|
| https://github.com/ros-planning/navigation2/issues/4177 | issue tracking exploit |
| https://github.com/ros-planning/navigation2/pull/4206 | third party advisory |
| https://github.com/GoesM/ROS-CVE-CNVDs | third party advisory |