Out-Of-Memory Vulnerability in Fast DDS by eProsima

CVE-2025-62599

What is CVE-2025-62599?

Fast DDS, a C++ implementation of the Data Distribution Service standard, is prone to an Out-Of-Memory condition when the security mode is enabled. Attackers can exploit this vulnerability by manipulating the DATA Submessage within an SPDP packet sent by a publisher. Specifically, modifying the length field in readPropertySeq of the PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN can trigger an integer overflow during the resize operation, resulting in the remote termination of Fast DDS. The vulnerability is addressed in versions 3.4.1, 3.3.1, and 2.6.11, emphasizing the importance of upgrading to these versions to mitigate potential security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References