CVE-2023-39948

HIGH

eprosima Fast DDS <2.10.0, <2.6.5 - Use After Free

Title source: llm

Description

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.

References (4)

Scores

CVSS v3 7.5
EPSS 0.0003
EPSS Percentile 9.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-248
Status published

Affected Products (4)

eprosima/fast_dds < 2.6.5
eprosima/fast_dds
debian/debian_linux
debian/debian_linux

Timeline

Published Aug 11, 2023
Tracked Since Feb 18, 2026