CVE-2024-28231

Manipulated DATA Submessage causes a heap-buffer-overflow error

9.7 CriticalPublic exploitFix available

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminated remotely. Additionally, the payload_size in the DATA Submessage packet is declared as uint32_t. When a negative number, such as -1, is input into this variable, it results in an Integer Overflow (for example, -1 gets converted to 0xFFFFFFFF). This eventually leads to a heap-buffer-overflow, causing the program to terminate. Versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8 contain a fix for this issue.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.94%Up 0.9 points since Mar 21, 2024

What each source reports

CVE List Score used 9.7

Manipulated DATA Submessage causes a heap-buffer-overflow error

Record: CVE-2024-28231
CVSS 3.1: 9.7 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

EUVDEUVD-2024-25347 9.7

Record: EUVD-2024-25347
CVSS 3.1: 9.7 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-03

NVD 9.6

Record: CVE-2024-28231
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-122, CWE-787
Updated: 2026-11-02

OSV 9.6

Manipulated DATA Submessage causes a heap-buffer-overflow error

Record: CVE-2024-28231
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-28231 7.5

Record: DEBIAN-CVE-2024-28231
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-28231 9.6

Record: UBUNTU-CVE-2024-28231
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`fastdds` Debian:12	All versions, plus listed versions 2.10.1+ds-12.10.1+ds-22.10.1+ds-32.11.2+ds-12.11.2+ds-2 Show 27 moreShow less 2.11.2+ds-32.11.2+ds-42.11.2+ds-52.11.2+ds-62.11.2+ds-6.12.11.2+ds-6.1~exp12.14.0+ds-12.14.0+ds-22.14.0+ds-32.14.0+ds-42.14.1+ds-12.14.2+ds-12.14.3+ds-12.9.1+ds-12.9.1+ds-1+deb12u12.9.1+ds-1+deb12u23.0.0+ds-13.0.0+ds-23.0.0+ds-33.0.1+ds-13.1.0+ds-13.1.0+ds-23.1.2+ds-13.3.0+ds-13.3.0+ds-23.3.0+ds-33.6.1+ds-1	None known
`fastdds` Debian:13	before 2.14.0+ds-2	2.14.0+ds-2
`fastdds` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 2.1.0+ds-92.4.1+ds-12.5.0+ds-32.5.0+ds-3ubuntu0.1~esm1	None known
`fastdds` Ubuntu:24.04:LTS	All versions, plus listed versions 2.10.1+ds-32.11.2+ds-62.11.2+ds-6ubuntu12.11.2+ds-6.1build22.11.2+ds-6.1build3	None known
`fastdds` Ubuntu:25.10	All versions, plus listed versions 3.1.2+ds-13.1.2+ds-1build1	None known
`fastdds` Ubuntu:26.10	All versions, plus listed versions 3.3.0+ds-3ubuntu13.3.0+ds-3ubuntu3	None known
`fastdds` Ubuntu:26.04:LTS	All versions, plus listed versions 3.1.2+ds-1build13.3.0+ds-3ubuntu1	None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	grimmmbo/ros2_CVE-2024-28231	2025-10-15

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-28231 is a critical vulnerability (CVSS 9.7) in Eprosima Fast-dds, published March 20, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. Fixed in fastdds 2.14.0+ds-2.