Skip to content
OpenAdvisories

Vendor

OpenDDS

4 known vulnerabilities.

Products

OpenDDS 3 DDS 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-52836

    OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of service

    OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a network attacker can crash a reachable OpenDDS participant by sending a malformed RTPS UDP submessage whose crafted length or…

    OpenDDS OpenDDS
  • High 8.2
    CVE-2023-24012 Public exploit

    Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS

    An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s…

    OpenDDS DDS
  • High 7.5
    CVE-2023-37915

    Malformed PID_PROPERTY_LIST parameter in DATA submessage remotely crashes OpenDDS

    OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `PID_PROPERTY_LIST` in a DATA submessage during participant discovery. Attackers can remotely crash Op…

    OpenDDS OpenDDS