CVE-2024-30258: Eprosima Fast Dds

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

Affected products

• Eprosima Fast Dds: before 2.6.8 (fixed in 2.6.8); from 2.10.0, before 2.10.4 (fixed in 2.10.4); from 2.13.0, before 2.13.5 (fixed in 2.13.5); version 2.14.0 only

Published 2024-05-14. Last modified 2026-06-17.