Malformed serialized data in a data submessage leads to unhandled exception
CVE-2023-39945
8.2HIGH
What is CVE-2023-39945?
eprosima Fast DDS, a C++ implementation of the Data Distribution Service standard, was found to have an unhandled 'BadParamException' when processing a data submessage sent to the PDP port. This flaw can lead to crashes in the Fast DDS application, potentially disrupting service operations. Affected versions include those prior to 2.11.0, 2.10.2, 2.9.2, and 2.6.5, which include necessary patches to address this issue.
Affected Version(s)
Fast-DDS < 2.6.5 < 2.6.5
Fast-DDS >= 2.7.0, < 2.9.2 < 2.7.0, 2.9.2
Fast-DDS >= 2.10.0, < 2.10.2 < 2.10.0, 2.10.2