CVE-2024-30259

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

• CWE-120
• CWE-122
• CWE-787

• https://drive.google.com/file/d/1Y2bGvP3UIOJCLh_XEURLdhrM2Sznlvlp/view?usp=sharingExploit
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-qcj9-939p-p662Exploit, Vendor Advisory
• https://vimeo.com/907641887?share=copyExploit
• https://drive.google.com/file/d/1Y2bGvP3UIOJCLh_XEURLdhrM2Sznlvlp/view?usp=sharingExploit
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-qcj9-939p-p662Exploit, Vendor Advisory
• https://vimeo.com/907641887?share=copyExploit

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-30253@solana/web3.js is the Solana JavaScript SDK. Using particul…7.5
• CVE-2024-30254MesonLSP is an unofficial, unendorsed language server for me…5.8
• CVE-2024-30255Envoy is a cloud-native, open source edge and service proxy.…7.5
• CVE-2024-30256Open WebUI is a user-friendly WebUI for LLMs. Open-webui is …6.4
• CVE-2024-302571Panel is an open source Linux server operation and maintena…5.9
• CVE-2024-30258FastDDS is a C++ implementation of the DDS (Data Distributio…7.5
• CVE-2024-3026The WordPress Button Plugin MaxButtons WordPress plugin befo…5.4
• CVE-2024-30260Undici is an HTTP/1.1 client, written from scratch for Node.…4.3
• CVE-2024-30261Undici is an HTTP/1.1 client, written from scratch for Node.…3.5
• CVE-2024-30262Contao is an open source content management system. Prior to…7.1
• CVE-2024-30263macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozill…7.7
• CVE-2024-30264Typebot is an open-source chatbot builder. A reflected cross…9.3