Lucene search
K

8 matches found

Snyk
Snyk
added 2026/02/03 7:49 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the DATAFRAG receive packet. An attacker can cause a crash or potentially execute arbitrary code by sending a specially crafted RTPS DATAFRAG packet with manipulated fragmentSize and sampleSize values that...

9.8CVSS6.1AI score0.00035EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/03 7:26 p.m.2 views

CVE-2025-62799 FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group . Prior to versions 3.4.1, 3.3.1, and 2.6.11, a heap buffer overflow exists in the Fast-DDS DATAFRAG receive path. An un authenticated sender can transmit a single malformed RTPS...

9.2CVSS5.9AI score0.00035EPSS
Exploits0References4
CVE
CVE
added 2026/02/03 7:26 p.m.9 views

CVE-2025-62799

CVE-2025-62799 affects Fast DDS (DDS implementation). A heap buffer overflow in the DATA_FRAG RTPS receive path allows an unauthenticated sender to send a malformed packet that exploits a 4‑byte alignment step during fragment metadata initialization, causing writes past the payload buffer. Conseq...

9.8CVSS5.9AI score0.00035EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/02/03 7:26 p.m.22 views

CVE-2025-62799 FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group . Prior to versions 3.4.1, 3.3.1, and 2.6.11, a heap buffer overflow exists in the Fast-DDS DATAFRAG receive path. An un authenticated sender can transmit a single malformed RTPS...

9.2CVSS0.00035EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-5252

Malware in sbrugna...

7.8CVSS7.6AI score0.00039EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 6:15 p.m.4 views

DEBIAN-CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

9.8CVSS6.9AI score0.01258EPSS
Exploits0References1
NVD
NVD
added 2020/09/08 10:15 a.m.18 views

CVE-2019-13994

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

7.8CVSS7.7AI score0.00039EPSS
Exploits0References2
Prion
Prion
added 2020/09/08 10:15 a.m.23 views

Memory corruption

u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon...

7.2CVSS7.7AI score0.00039EPSS
Exploits0References2
Rows per page
Query Builder