Back to Database
Status published
High
CVE-2023-39949
Improper validation of sequence numbers leading to remotely reachable assertion failure
Vulnerability Description
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-39949
Credits & Attribution
No credits recorded in the NVD database.
References
More from eProsima
View All →CVE-2025-64438
Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS
Low
1.7
CVE-2025-64098
FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled
Low
1.7
CVE-2025-62799
FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)
High
7.2
CVE-2025-62603
FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled
Low
1.7
CVE-2025-62602
FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled
Low
1.7
Affected Vendor
eProsima
View all reports →Affected Software
Fast-DDS
Vulnerable Versions:
>= 2.7.0, < 2.9.1, < 2.6.5
Timeline
Official Publish:
August 11th, 2023
Last Modified:
February 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H