Out-of-Bounds Read Vulnerability in eprosima Fast DDS C++ Implementation

CVE-2026-22590

What is CVE-2026-22590?

The eprosima Fast DDS implementation of the DDS standard is susceptible to an Out-of-Bounds Read vulnerability in certain versions. An attacker can exploit this by sending specially crafted RTPS DATA_FRAG submessages. By manipulating the sampleSize and the fragmentsInSubmessage, an attacker forces the receiver to misinterpret the packet as the last fragment. This allows memcpy() to read past the allocated buffer, potentially leaking sensitive information from adjacent heap memory. This can lead to critical implications, including the exposure of pointer values that might compromise system security. To mitigate this risk, users are advised to update to the patched versions: 2.6.12, 2.14.6, 3.2.4, 3.3.1, or 3.4.2.

References