CVE-2024-33903

MEDIUM

CARLA <0.9.15.2 - Info Disclosure

Title source: llm

Description

In CARLA through 0.9.15.2, the collision sensor mishandles some situations involving pedestrians or bicycles, in part because the collision sensor function is not exposed to the Blueprint library.

References (5)

[Various Sources] https://github.com/carla-simulator/carla/blob/60bd026b4822b4edb8a68cc17b9119866f303853/Docs/core_concepts.md

View Writeup ZIP pw:eip

[Various Sources] https://github.com/carla-simulator/carla/tags

[Issue Tracking] https://github.com/carla-simulator/carla/issues/7025

[Issue Tracking] https://github.com/carla-simulator/carla/issues/7394#issuecomment-2058130066

[Issue Tracking] https://github.com/carla-simulator/carla/pull/7445

Scores

CVSS v3 5.9

EPSS 0.0008

EPSS Percentile 22.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Classification

CWE

CWE-693

Status draft

Timeline

Published Apr 29, 2024

Tracked Since Feb 18, 2026