Use-After-Free Vulnerability in ROS2 and Nav2 humble Versions

CVE-2024-38921

What is CVE-2024-38921?

The Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are susceptible to a use-after-free vulnerability related to the nav2_amcl process. This flaw can be exploited remotely by sending a request to modify the value of the dynamic parameter '/amcl z_rand'. Successful exploitation may lead to unintended behavior or crashes, posing significant security risks to robotics applications using these systems. Immediate attention and remedies are crucial to mitigate potential attacks stemming from this vulnerability.

References