EeProsima

Products

Exploited and recent CVEs

• CVE-2026-22591 High 7.5 Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS) 0.5%
• CVE-2026-22590 Critical 9.1 Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage 0.5%
• CVE-2025-64438 Low 1.7 Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS 0.6%
• CVE-2025-64098 Low 1.7 FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled 0.5%
• CVE-2025-62799 High 7.2 FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) 0.5%
• CVE-2025-62603 Low 1.7 FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled 0.6%
• CVE-2025-62602 Low 1.7 FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled 0.5%
• CVE-2025-62601 Low 1.7 FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled 0.6%
• CVE-2025-62600 High 8.6 eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled 0.5%
• CVE-2025-62599 High 8.6 eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled 0.4%
• CVE-2025-24807 Medium 4.5 Fast DDS does not verify Permissions CA 0.2%
• CVE-2023-24010 High 8.2 Data Distribution Service (DDS) Chain of Trust (CoT) violation in Fast DDS 0.3%
• CVE-2024-30259 High 8.2 FastDDS heap buffer overflow when publisher sends malformed packet 0.9%
• CVE-2024-30258 High 8.2 FastDDS crash when publisher send malformed packet 0.8%
• CVE-2024-28231 Critical 9.7 Manipulated DATA Submessage causes a heap-buffer-overflow error 0.9%
• CVE-2023-50716 Critical 9.7 Invalid DATA_FRAG Submessage causes a bad-free error 0.7%
• CVE-2023-50257 Critical 9.7 Disconnect Vulnerability in RTPS Packets Used by SROS2 0.5%
• CVE-2023-42459 High 8.6 Malformed DATA submessage leads to bad-free error in Fast-DDS 1.0%
• CVE-2023-39949 High 7.5 Improper validation of sequence numbers leading to remotely reachable assertion failure 1.0%
• CVE-2023-39948 High 7.5 Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds 1.0%
• CVE-2023-39947 High 8.2 Another heap overflow in push_back_helper 1.0%
• CVE-2023-39946 High 8.2 Heap overflow in push_back_helper due to a CDR message 0.9%
• CVE-2023-39945 High 8.2 Malformed serialized data in a data submessage leads to unhandled exception 0.9%
• CVE-2023-39534 High 7.5 Malformed GAP submessage triggers assertion failure 1.0%
• CVE-2021-38425 High 7.5 eProsima Fast DDS Network Amplification 5.0%