CVE-2026-22591

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-22591
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22591.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-22591
Aliases
  • GHSA-7577-rf2r-j88m
Published
2026-09-09T15:47:17Z
Modified
2026-09-10T03:45:52Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
Details

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3, Fast DDS’s implementation of SQL‑based content filtering (DDSSQLFilter) allows any participant in a DDS domain to remotely crash other Fast DDS participants by sending a single crafted SEDP DATA submessage whose PID_CONTENT_FILTER_PROPERTY.filterExpression contains a deeply nested filter expression. Versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3 fix the issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-400",
        "CWE-674"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22591.json"
}
References

Affected packages

Git / github.com/eprosima/fast-dds

Affected ranges

Type
GIT
Repo
https://github.com/eprosima/fast-dds
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ac5c7b9014cd5b2bebf9c4b04dc229ca5a0a4338
Introduced
eaeb0f593ad61fe77cf105c7ebbac44b60a13934
Fixed
f052f239538ebc0df56835fdb57f7628628010bc
Introduced
c53cd0a425e6f5483fbd971eb584b4360c306891
Fixed
942570bf1f90701bba0c1e3bbca82569c1e966c2
Introduced
bf1d4c34c3b2b6267cd854346b1477854967264e
Fixed
be2655aaf6d3001ae26a6249962a1f628a573c27
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6.12"
        },
        {
            "introduced": "2.7.0"
        },
        {
            "fixed": "2.14.6"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.2.4"
        },
        {
            "introduced": "3.4.0"
        },
        {
            "fixed": "3.4.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2.*
2.0.0-beta
2.0.0-rc
Other
Discovery-Time_Data_Typing
v1.*
v1.0.0
v1.3.0
v1.4.0
v1.5.0
v1.6.0
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.0-2
v1.9.0
v1.9.0-beta
v1.9.0-beta-2
v2.*
v2.1.0
v2.10.0-rc1
v2.10.1-rc1
v2.2.0
v2.3.0-1
v2.3.0-api

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-22591.json"