CVE-2021-38435CWE-131

RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size

Medium · published May 5, 2022

CVSS v3.1
6.6
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01445 · 73.1th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2022-05-05T15:27Z
EPSS history
Timeline
  • 05 MAY 15:27Z
    RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size
    cvelistv5