CVE-2025-62599

CWE-190 — Integer OverflowCWE-7895 documents5 sources
Severity
7.5HIGH
EPSS
0.0%
top 94.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Eprosima Fast-ddsEprosima Fast DDSDebian Debian Linux
Timeline
PublishedFeb 3

Description

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by tampering with the length fi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages2 packages

▶CVEListV5eprosima/fast-dds< 2.6.11+4
▶NVDeprosima/fast_dds3.0.0 — 3.3.1+2

Also affects: Debian Linux 11.0, 12.0, 13.0

🔴Vulnerability Details

2
CVEList
eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled↗2026-02-03
▶
OSV
CVE-2025-62599: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group )↗2026-02-03
▶

📋Vendor Advisories

1
Debian
CVE-2025-62599: fastdds - Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard...↗2025
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-62599 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶