CVE-2025-64438 — Infinite Loop in Fast-dds

CWE-835 — Infinite Loop5 documents5 sources
Severity
1.7LOWNVD
EPSS
0.0%
top 87.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Eprosima Fast-ddsEprosima Fast DDS
Timeline
PublishedFeb 3

Description

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, a remotely triggerable Out-of-Memory (OOM) denial-of-service exists in Fast -DDS when processing RTPS GAP submessages under RELIABLE QoS. By sending a tiny GAP packet with a huge gap range (`gapList .base - gapStart`), an attacker drives `StatefulReader::processGapMsg()` into an unbounded loop that inserts millions of s equence number…

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5eprosima/fast-dds3.4.0 — 3.4.1+2
▶NVDeprosima/fast_dds3.0.0 — 3.3.1+2

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
OSV
CVE-2025-64438: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group )↗2026-02-03
▶
CVEList
Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS↗2026-02-03
▶

📋Vendor Advisories

1
Debian
CVE-2025-64438: fastdds - Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard...↗2025
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-64438 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-64438 — Infinite Loop in Eprosima Fast-dds | cvebase