CVE-2024-38920

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are affected by a use-after-free vulnerability in the nav2_amcl process. The issue is triggered by remotely sending a request to modify the value of the dynamic parameter /amcl max_beams. Exploitation details are not provide...