What’s Vulnerable › Products
eProsima Fast-DDS vulnerabilities
30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your eProsima Fast-DDS version is affected
Latest eProsima Fast-DDS vulnerabilities
- CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS) (CVSS 7.5)
- CVE-2026-22590 — Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage (CVSS 9.1)
- CVE-2025-64438 — Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS (CVSS 7.5)
- CVE-2025-64098 — FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled (CVSS 5.9)
- CVE-2025-62799 — FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) (CVSS 9.8)
- CVE-2025-62603 — FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled (CVSS 7.5)
- CVE-2025-62602 — FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled (CVSS 7.5)
- CVE-2025-62601 — FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled (CVSS 7.5)
- CVE-2025-62600 — eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled (CVSS 7.5)
- CVE-2025-62599 — eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled (CVSS 7.5)
- CVE-2025-67108 — (CVSS 10.0)
- CVE-2025-65865 — (CVSS 7.5)
- CVE-2025-63829 — (CVSS 7.5)
- CVE-2025-24807 — Fast DDS does not verify Permissions CA (CVSS 7.1)
- CVE-2024-30259 — FastDDS heap buffer overflow when publisher sends malformed packet (CVSS 7.5)
- CVE-2024-30258 — FastDDS crash when publisher send malformed packet (CVSS 7.5)
- CVE-2024-30917 — (CVSS 5.5)
- CVE-2024-30916 — (CVSS 7.1)
- CVE-2024-28231 — Manipulated DATA Submessage causes a heap-buffer-overflow error (CVSS 7.5)
- CVE-2024-26369 — (CVSS 7.5)
- CVE-2023-50716 — Invalid DATA_FRAG Submessage causes a bad-free error (CVSS 9.8)
- CVE-2023-50257 — Disconnect Vulnerability in RTPS Packets Used by SROS2 (CVSS 8.1)
- CVE-2023-42459 — Malformed DATA submessage leads to bad-free error in Fast-DDS (CVSS 7.5)
- CVE-2023-39949 — Improper validation of sequence numbers leading to remotely reachable assertion failure (CVSS 7.5)
- CVE-2023-39948 — Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds (CVSS 7.5)