Medium · 6.5 CVE-2024-25197 EUVD-2024-22533GHSA-r3h6-h7mc-hvh5

Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isC…

Published Feb 20, 2024 · Updated Oct 29, 2024 · Assigned by mitre

Description

Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.

References

https://github.com/ros-planning/navigation2/issues/3940
https://github.com/ros-planning/navigation2/issues/3958
https://github.com/ros-planning/navigation2/issues/3971
https://github.com/ros-planning/navigation2/issues/3972