Objectcomputing Opendds — known CVE vulnerabilities

Every CVE whose affected-product data names Objectcomputing Opendds, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2021-38447 — CVSS 8.6 (high): OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted…
• CVE-2025-67111 — CVSS 7.5 (high): An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to cause a Denial of Service (DoS)…
• CVE-2023-37915 — CVSS 7.5 (high): OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while…
• CVE-2023-52427 — CVSS 7.5 (high): In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the…
• CVE-2021-38445 — CVSS 7.0 (high): OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may…
• CVE-2021-38429 — CVSS 6.6 (medium): OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted…
• CVE-2023-23932 — CVSS 5.3 (medium): OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS applications…
• CVE-2024-30915 — CVSS 4.3 (medium): An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service…