Summary | An insecure deserialization vulnerability has been identified in ROS2 Humble Hawksbill in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows attackers to execute arbitrary code and obtain sensitive information via crafted input to the Data Serialization and Deserialization Components, Inter-Process Communication Mechanisms, and Network Communication Interfaces. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. |
---|---|
Publication Date | April 11, 2024, 11:15 a.m. |
Registration Date | April 11, 2024, 4 p.m. |
Last Update | May 17, 2024, 11:37 a.m. |