OpenDDS vulnerabilities
We track 4 vulnerabilities in OpenDDS products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
Latest OpenDDS vulnerabilities
- 8.7 High severity
OpenDDS: Out-of-bounds Read
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a network attacker can crash a reachable OpenDDS participant by sending a malformed RTPS UDP submessage whose crafted length or
- 8.2 High severity
DDS: Exposure of Sensitive Information to an Unauthorized Actor
An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s
- 7.5 High severity
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data…
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `PID_PROPERTY_LIST` in a DATA submessage during participant discovery. Attackers can remotely crash Ope
- 7.5 High severity
OpenDDS: Uncaught Exception
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS applications that are exposed to untrusted RTPS network traffic may crash when parsing badly-formed input. This issue has been patched in