Eprosima Fast-dds vulnerabilities

• eprosima fast-dds Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS) CVE-2026-22591 7.5 HighSeptember 9, 2026
• eprosima fast-dds Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage CVE-2026-22590 9.1 CriticalSeptember 9, 2026
• eprosima fast-dds, fast dds +1 more Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS CVE-2025-64438 1.7 LowFebruary 3, 2026
• eprosima fast-dds, fast dds, debian linux +2 more FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled CVE-2025-64098 1.7 LowFebruary 3, 2026
• eprosima fast-dds, fast dds, debian linux +2 more FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) CVE-2025-62799 7.2 HighFebruary 3, 2026
• eprosima fast dds, debian linux, eprosima fast-dds +2 more FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled CVE-2025-62603 1.7 LowFebruary 3, 2026
• eprosima fast-dds, fast dds, debian linux +2 more FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled CVE-2025-62602 1.7 LowFebruary 3, 2026
• eprosima fast-dds, fast dds +1 more FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled CVE-2025-62601 1.7 LowFebruary 3, 2026
• eprosima fast-dds, fast dds, debian linux +2 more eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled CVE-2025-62600 8.6 HighFebruary 3, 2026
• eprosima fast-dds, fast dds, debian linux +2 more eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled CVE-2025-62599 8.6 HighFebruary 3, 2026
• eprosima fast dds, fast-dds +1 more Fast DDS does not verify Permissions CA CVE-2025-24807 Fix available 4.5 MediumFebruary 11, 2025
• eprosima fast-dds, fast dds +1 more FastDDS heap buffer overflow when publisher sends malformed packet CVE-2024-30259 Fix available 8.2 HighMay 13, 2024
• eprosima fast-dds, fast dds +1 more FastDDS crash when publisher send malformed packet CVE-2024-30258 Fix available 8.2 HighMay 13, 2024
• eprosima fast-dds, fast dds +1 more Manipulated DATA Submessage causes a heap-buffer-overflow error CVE-2024-28231 Public exploitFix available 9.7 CriticalMarch 20, 2024
• eprosima fast-dds, fast dds +1 more Invalid DATA_FRAG Submessage causes a bad-free error CVE-2023-50716 Fix available 9.7 CriticalMarch 6, 2024
• eprosima fast dds, fast-dds +1 more Disconnect Vulnerability in RTPS Packets Used by SROS2 CVE-2023-50257 Public exploitFix available 9.7 CriticalFebruary 19, 2024
• eprosima fast-dds, fast dds +1 more Malformed DATA submessage leads to bad-free error in Fast-DDS CVE-2023-42459 Fix available 8.6 HighOctober 16, 2023
• eprosima fast-dds, fast dds, debian linux +2 more Improper validation of sequence numbers leading to remotely reachable assertion failure CVE-2023-39949 Fix available 7.5 HighAugust 11, 2023
• eprosima fast dds, debian linux, eprosima fast-dds +2 more Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds CVE-2023-39948 Fix available 7.5 HighAugust 11, 2023
• eprosima fast-dds, fast dds, debian linux +2 more Another heap overflow in push_back_helper CVE-2023-39947 Fix available 8.2 HighAugust 11, 2023
• eprosima fast-dds, fast dds, debian linux +2 more Heap overflow in push_back_helper due to a CDR message CVE-2023-39946 Fix available 8.2 HighAugust 11, 2023
• eprosima fast dds, debian linux, eprosima fast-dds +2 more Malformed serialized data in a data submessage leads to unhandled exception CVE-2023-39945 Fix available 8.2 HighAugust 11, 2023
• eprosima fast dds, debian linux, eprosima fast-dds +2 more Malformed GAP submessage triggers assertion failure CVE-2023-39534 Fix available 7.5 HighAugust 11, 2023