ROS-20221013-01

A vulnerability in the D-Bus interprocess communication system is related to the reachability of an assertion in debug builds caused by a syntactically invalid type signature with improperly nested brackets and curly braces. Exploitation of the vulnerability could allow an attacker to execute a denial of service (DoS) attack

A vulnerability in the D-Bus interprocess communication system involves a boundary error caused by an invalid fixed-length array of elements, where the array length is not a multiple of the element length. Exploitation of the vulnerability could allow an attacker to initiate an out-of-bounds read and gain access to sensitive information

A vulnerability in the D-Bus interprocess communication system is associated with a post-release memory utilization error caused by a message with non-native byte ordering with out-of-band Unix file descriptors. Exploitation of the vulnerability could allow an attacker to execute arbitrary code with elevated privileges