CVE-2024-38922

Published: Dec 6, 2024

Modified: Dec 11, 2024

PUBLISHED

Description

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /initialpose.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/ros-navigation/navigation2/issues/4294

https://github.com/open-navigation/navigation2/issues/4307

https://github.com/ros-navigation/navigation2/pull/4301

https://github.com/GoesM/ROS-CVE-CNVDs

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-38922

Description

Affected Products

References