CVE-2024-26369

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-19 · updated 2026-06-17
Weakness: CWE-400

Description

An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data.

Affected products

eProsima Fast-DDS: v2.6.x, v2.10.x, v2.11.x, v2.12.x

References

https://github.com/eProsima/Fast-DDS/issues/4365
https://github.com/eProsima/Fast-DDS/pull/4375
https://github.com/eProsima/Fast-DDS/issues/4365
https://github.com/eProsima/Fast-DDS/pull/4375

Get alerted when CVE-2024-26369 or the next vulnerability affects your stack