CVE-2024-38924

Summary

CVE-2024-38924 is a newly discovered vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions. This issue involves a use-after-free vulnerability in the nav2_amcl process. The flaw can be exploited remotely by sending a request to change the value of the dynamic-parameter `/amcl laser_model_type`. Once triggered, the use-after-free vulnerability may result in memory corruption and potentially allow an attacker to execute arbitrary code. This vulnerability poses a significant risk to systems utilizing these versions of ROS2 and Nav2 and should be addressed promptly by updating to the latest, secure versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.