CVE-2024-38921

Summary

CVE-2024-38921 is a newly discovered vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions. This issue involves a use-after-free vulnerability in the nav2_amcl process, which can be triggered remotely by changing the value of the dynamic-parameter `/amcl z_rand`. If exploited, this vulnerability could allow an attacker to cause memory corruption and potentially gain unauthorized access to the system. The use-after-free vulnerability occurs when a pointer is used to access memory that has already been freed, leading to unpredictable behavior and potential security risks. It is important for users of Open Robotics ROS2 and Nav2 to apply the necessary patches as soon as possible to mitigate the risk of this vulnerability being exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.