CVE-2024-38922

Summary

CVE-2024-38922 is a newly disclosed vulnerability affecting Open Robotics' Robotic Operating System 2 (ROS2) and Nav2 humble version. The issue involves a heap overflow in the nav2_amcl process, which can be triggered by sending a specially crafted message to the component's /initialpose interface. This vulnerability may allow an attacker to execute arbitrary code or cause the system to crash, potentially leading to significant disruptions or unauthorized access. It is crucial for users of ROS2 and Nav2 to update their software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.