VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Mar 6, 2024· Updated Jun 17, 2026

CVE-2023-50716

CVE-2023-50716

Description

eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely terminated. If an invalid Data_Frag packet is sent, the Inline_qos, SerializedPayload member of object ch will attempt to release memory without initialization, resulting in a 'bad-free' error. Versions 2.13.0, 2.12.2, 2.11.3, 2.10.2, and 2.6.7 fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Eprosima/Fast Rtpsllm-fuzzy
    Range: <2.13.0, <2.12.2, <2.11.3, <2.10.3, <2.6.7
  • Eprosima/FastDDSllm-create3 versions
    <2.13.0, <2.12.2, <2.11.3, <2.10.3, <2.6.7+ 2 more
    • (no CPE)range: <2.13.0, <2.12.2, <2.11.3, <2.10.3, <2.6.7
    • cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*range: <2.6.7
    • (no CPE)range: >= 2.12.0, < 2.12.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.