Heap Out-of-Bounds Write in Navigation Framework in ROS 2 by Open Robotics

CVE-2026-26011

What is CVE-2026-26011?

The navigation2 framework in ROS 2 contains a vulnerability in its AMCL's particle filter clustering logic, where an attacker can send a specially crafted message to trigger a heap out-of-bounds write. This condition arises when the boundary check is optimized away in release builds, allowing attackers to corrupt heap memory. Consequently, the vulnerability can lead to controlled corruption of heap chunk metadata, potentially facilitating further exploit attempts. At the very least, it results in a denial of service, disrupting localization and halting navigation functionalities.

References