CVE-2019-13445 | BDVDB-2026-128372 Detail

Description#

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ros/ros_comm/blob/melodic-devel/tools/rosbag/src/record.cpp#L129
https://github.com/ros/ros_comm/pull/1741
https://github.com/ros/ros_comm/issues/1738

Exploit#

No public exploit known

History#

Version 12019-12-30Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.