CVE-2024-37861

Summary

CVE-2024-37861 is a newly discovered buffer overflow vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions. The issue is related to the nav2_amcl process and is triggered by receiving a specially crafted .yaml file. This vulnerability could potentially allow an attacker to execute arbitrary code, leading to serious security consequences. Users are advised to update their systems to the latest versions as soon as possible to mitigate this risk. The Open Robotics Foundation has released patches to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.