CVE-2023-50716

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-50716

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50716.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-50716

Aliases

GHSA-5m2f-hvj2-cx2h

Downstream

DEBIAN-CVE-2023-50716

UBUNTU-CVE-2023-50716

Published

2024-03-06T17:23:55.916Z

Modified

2025-12-05T00:13:23.954648Z

Severity

9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

Invalid DATA_FRAG Submessage causes a bad-free error

Details

eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely terminated. If an invalid DataFrag packet is sent, the Inline_qos, SerializedPayload member of object ch will attempt to release memory without initialization, resulting in a 'bad-free' error. Versions 2.13.0, 2.12.2, 2.11.3, 2.10.2, and 2.6.7 fix this issue.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-416"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50716.json"
}

References

Affected packages

Git / github.com/eprosima/fast-dds

Affected ranges

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

9489d2056015c89cee1d93d8e8453d997ffecf33

Fixed

092848725b8425e4f05a8ccf7b3b8d513fabf733

Database specific

{
    "versions": [
        {
            "introduced": "2.12.0"
        },
        {
            "fixed": "2.12.2"
        }
    ]
}

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

64700fcb9058c14e3c7aeee0ec130c47c9824917

Fixed

13ccafc09fe95873fa22d2bd13e3a331efb6a01c

Database specific

{
    "versions": [
        {
            "introduced": "2.11.0"
        },
        {
            "fixed": "2.11.3"
        }
    ]
}

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

463d59ca81c7fd732edf45b982a58c0b54fc1da4

Fixed

5ac1dbacc7847f9bc080328930a7a8adcada2fe5

Database specific

{
    "versions": [
        {
            "introduced": "2.10.0"
        },
        {
            "fixed": "2.10.3"
        }
    ]
}

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

Fixed

125f90341a52d73abcfa5621f9bb51895cf44bbb

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6.7"
        }
    ]
}