by Kastro
Paper/Archive/CVE-2024-25198

CVE-2024-25198

openrobotics robot_operating_system — Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Syt…

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 53.5.535 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.

Affected

ProductAffectedFixed inSource
n/an/a–CNA
robot_operating_system2–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/ros-planning/navigation2/pull/4068refgithub.com/ros-planning/navigation2/pull/4070refgithub.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344