CVE-2021-38445: Objectcomputing Opendds

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.

Affected products

• Objectcomputing Opendds: before 3.18.1 (fixed in 3.18.1)

Published 2022-05-05. Last modified 2026-06-17.