Medium severity6.6NVD Advisory· Published May 5, 2022· Updated Jun 17, 2026
CVE-2021-38441
CVE-2021-38441
Description
Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <0.8.0
- cpe:2.3:a:eclipse:cyclonedds:*:*:*:*:*:*:*:*range: <0.8.0
Patches
Vulnerability mechanics
References
2- www.cisa.gov/uscert/ics/advisories/icsa-21-315-02nvdThird Party AdvisoryUS Government Resource
- projects.eclipse.org/projects/iot.cycloneddsnvdProduct
News mentions
0No linked articles in our index yet.