Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2024-38910: ROS2 Nav2 Humble: Changing Parameters Can Crash Robot Navigation
CVE-2024-38910 · published 1 year ago
Summary
A flaw in the Nav2 navigation system for robots can cause a crash when changing certain settings. This could disrupt robot operations and potentially lead to accidents. Update to the latest version of ROS2 Nav2 to fix this issue.
Original advisory text
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to...
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published5 Dec 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-38910 · NVD
Track software like this
Free during beta