An attacker can target the Eprosima Micro‑XRCE‑DDS Agent by sending a packet that contains an invalid Boolean value in any Boolean field. The lack of proper validation (CWE‑241) causes the agent to mishandle the field, triggering an internal exception that can lead to resource exhaustion. The result is a denial of service, preventing the agent from responding, while no data is compromised or disclosed. The description infers that the void Boolean field can be any field processed by the agent and that the packet reaches the agent across the network, implying a remote attack vector.

The vulnerability is limited to Eprosima Micro‑XRCE‑DDS Agent version 3.0.1, with no other versions or products reported as affected in the available data.

The exploit is remote, requiring network communication to the agent. No official fix or workaround has been published, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 7.5 indicates a high severity. Because the EPSS score is less than 1% and no patch exists, the effective exploitation probability is low, yet the denial of service impact makes it a high‑risk issue for environments that depend on continuous DDS agent operation.