CVE-2024-25196: Buffer Overflow
Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25196?
CVE-2024-25196 is classified as a high severity vulnerability due to its potential for remote code execution through a buffer overflow.
How do I fix CVE-2024-25196?
To fix CVE-2024-25196, you should update to the latest versions of Open Robotics Robotic Operating System 2 (ROS2) and Nav2 that contain the security patches.
What causes the CVE-2024-25196 vulnerability?
The CVE-2024-25196 vulnerability is caused by a buffer overflow triggered by sending a specially crafted .yaml file to the nav2_controller process.
Who is affected by CVE-2024-25196?
Users of Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by CVE-2024-25196.
Can CVE-2024-25196 lead to remote code execution?
Yes, CVE-2024-25196 can potentially lead to remote code execution due to the buffer overflow vulnerability in the nav2_controller process.