CVE-2023-39948 Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds

2023-08-1113:51:38

CWE-248

GitHub_M

raw.githubusercontent.com

cve-2023-39948

eprosima fast dds

remote process crash

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

18.4%

JSON

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the BadParamException thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.