CVE-2021-38443: Eclipse Cyclonedds

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser.

Affected products

• Eclipse Cyclonedds: before 0.8.0 (fixed in 0.8.0)

Published 2022-05-05. Last modified 2026-06-17.