CVE-2024-30259

What it actually does

Malformed RTPS packet from a publisher triggers a heap buffer overflow in the FastDDS subscriber implementation, resulting in process termination.

Why it matters to the business

Remote attackers can crash any FastDDS-based process, causing denial-of-service outages in distributed systems that rely on this library for real-time data exchange; current exploitation likelihood remains low.

How an attack unfolds

An attacker identifies a reachable FastDDS subscriber, crafts a malformed RTPS packet, and sends it over the network; the subscriber's handling code performs an out-of-bounds write on the heap and crashes.

How to fix it

Upgrade eprosima/fast-dds to version 2.14.1, 2.13.5, 2.10.4, or 2.6.8 (or commit 77cfbe8a3a831ac525dbaf4c741743f65f3316c1) and rebuild dependent applications.

How to confirm the fix worked

Confirm the installed FastDDS version is one of the patched releases, review build logs for the referenced commit, and test packet handling with known-good and malformed RTPS traffic in a lab environment.

Typical attack path

1. Locate network-reachable FastDDS subscriber instances
2. Craft a malformed RTPS packet that triggers the overflow condition
3. Transmit the packet to the subscriber
4. Observe process crash and resulting service disruption

How to detect it

Review FastDDS process logs and system crash dumps for sudden terminations coinciding with incoming RTPS traffic; inspect network captures for anomalous RTPS packet structures from untrusted sources.

What your security team should do

• Apply the listed version upgrades immediately on all affected deployments
• Monitor process health and restart policies for FastDDS-based services
• Restrict inbound RTPS traffic to trusted publishers where feasible
• Track EPSS and KEV updates for any change in observed exploitation