CVE-2021-38441

Name of the Vulnerable Software and Affected Versions Eclipse CycloneDDS versions prior to 0.8.0

Description The issue is related to a write-what-where condition that may allow an attacker to write arbitrary values in the XML parser. This could potentially be exploited by an attacker.

Recommendations For Eclipse CycloneDDS versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the XML parser to minimize the risk of exploitation.