CVE Tools

Openrobotics

30 CVEs tracked since 2024. Since Feb 2024, none of them reached CISA KEV.

Openrobotics CVEs per month

Feb 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Openrobotics CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0240
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-12210
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-0750
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Openrobotics's monthly top three, with their CVEs summed over those months.

  1. Robot Operating System303 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Openrobotics.

  1. CVE-2025-3753Unsafe use of eval() method in rosbag tool7.8
  2. CVE-2024-41921Unsafe use of eval() method in rostopic echo tool7.8
  3. CVE-2024-41148Unsafe use of eval() method in rostopic hz tool7.8
  4. CVE-2024-39835Unsafe use of eval() method in roslaunch tool7.8
  5. CVE-2024-39289Unsafe use of eval() method in rosparam tool7.8
  6. CVE-2024-39780Use of unsafe yaml load in dynparam7.8
  7. CVE-2024-44856Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().7.5
  8. CVE-2024-44853Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl().7.5
  9. CVE-2024-44854Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan().7.5
  10. CVE-2024-44855Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().7.5
  11. CVE-2024-44852Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component theta_star::ThetaStar::isUnsafeToPlan().9.8
  12. CVE-2024-38922Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted mes...9.8
  13. CVE-2024-38926Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending ...9.8
  14. CVE-2024-38923Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending ...9.8
  15. CVE-2024-38921Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending ...9.8

The record

Peak rank
#33 in Dec 2024
Busiest month shown
Dec 2024, 21 CVEs
Months with a KEV entry
0 since Feb 2024
Monthly snapshots
3 since 2024
Openrobotics's full record, month by month