Vulnerabilities > CVE-2024-38925 - Use After Free vulnerability in Openrobotics Robot Operating System 2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_max` .
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |