OpenDDS

Products

ProductCVEsExploitedLatest
OpenDDS3–Sep 17, 2026
DDS1–Jan 9, 2025

Exploited and recent CVEs

  • CVE-2026-52836 High 8.7 OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of service 0.7%
  • CVE-2023-24012 High 8.2 Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS 0.3%
  • CVE-2023-37915 High 7.5 Malformed PID_PROPERTY_LIST parameter in DATA submessage remotely crashes OpenDDS 0.9%
  • CVE-2023-23932 Medium 5.3 Specially crafted RTPS message may cause an OpenDDS application to crash 0.7%