Detections
Analytics
CVE-2019-13445
critical
Description
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.
References
https://github.com/ros/ros_comm/pull/1741
https://github.com/ros/ros_comm/issues/1738
https://github.com/ros/ros_comm/blob/melodic-devel/tools/rosbag/src/record.cpp#L129