Eprosima Fast-Dds vulnerabilities
23 known vulnerabilities affecting eprosima/fast-dds.
Total CVEs
23
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH19MEDIUM1
Vulnerabilities
Page 2 of 2
CVE-2023-39947P3HIGHCVSS 7.5fixed in 2.6.6v>= 2.7.0, < 2.9.2+2 more2023-08-11
CVE-2023-39947 [HIGH] CWE-122 CVE-2023-39947: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Ma
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed `PID_PROPERTY_LIST` parameters cause heap overflow at a different program counter. This can remotely crash any Fast-DDS process. Versions
nvd
CVE-2025-64098P4MEDIUMCVSS 5.9≥ 3.4.0, < 3.4.1≥ 3.0.0, < 3.3.1+1 more2026-02-03
CVE-2025-64098 [MEDIUM] CWE-125 CVE-2025-64098: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group
). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an
SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-
nvd
CVE-2025-24807P4HIGHCVSS 7.1fixed in 2.6.10v>= 2.7.0, < 2.10.7+3 more2025-02-11
CVE-2025-24807 [HIGH] CWE-345 CVE-2025-24807: eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG
eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access control plugin validates only the S/MIME signature which c
nvd
← Previous2 / 2