CVE-2024-25199

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25199
Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 Product
https://github.com/ros-planning/navigation2/pull/4078 Exploit Issue Tracking Patch
https://github.com/ros-planning/navigation2/pull/4079 Issue Tracking Patch
https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 Product
https://github.com/ros-planning/navigation2/pull/4078 Exploit Issue Tracking Patch
https://github.com/ros-planning/navigation2/pull/4079 Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:opennav:nav2:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:openrobotics:robot_operating_system:2:humble:*:*:*:*:*:*
History

02 Apr 2025, 20:16

Type Values Removed Values Added
First Time Opennav
Opennav nav2
Openrobotics robot Operating System
Openrobotics
CPE cpe:2.3:a:opennav:nav2:*:*:*:*:*:*:*:*
cpe:2.3:o:openrobotics:robot_operating_system:2:humble:*:*:*:*:*:*
References () https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 - () https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 - Product
References () https://github.com/ros-planning/navigation2/pull/4078 - () https://github.com/ros-planning/navigation2/pull/4078 - Exploit, Issue Tracking, Patch
References () https://github.com/ros-planning/navigation2/pull/4079 - () https://github.com/ros-planning/navigation2/pull/4079 - Issue Tracking, Patch

21 Nov 2024, 09:00

Type Values Removed Values Added
References () https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 - () https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344 -
References () https://github.com/ros-planning/navigation2/pull/4078 - () https://github.com/ros-planning/navigation2/pull/4078 -
References () https://github.com/ros-planning/navigation2/pull/4079 - () https://github.com/ros-planning/navigation2/pull/4079 -

29 Aug 2024, 20:36

Type Values Removed Values Added
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1
Summary
  • (es) El orden inadecuado de los punteros de map_sub_ y map_free(map_) (amcl_node.cpp) en las versiones humildes de Open Robotics Robotic Operating Sytstem 2 (ROS2) y Nav2 conduce a un use-after-free.

20 Feb 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-20 14:15

Updated : 2025-04-02 20:16

NVD link : CVE-2024-25199

Mitre link : CVE-2024-25199

CVE.ORG link : CVE-2024-25199

JSON object : View

Products Affected

opennav

  • nav2

openrobotics

  • robot_operating_system
CWE
CWE-416

Use After Free