Out-Of-Memory Vulnerability in Fast DDS by eProsima

CVE-2025-62600

What is CVE-2025-62600?

Fast DDS, an implementation of the DDS standard by eProsima, is susceptible to an Out-Of-Memory vulnerability when its security mode is engaged. This weakness arises from unauthorized modifications to the DATA Submessage within an SPDP packet sent by a publisher. Specifically, tampering with the PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN — particularly by altering the length in readBinaryPropertySeq — can trigger an integer overflow. This results in an OOM condition that may lead to the remote termination of Fast DDS. This issue is rectified in versions 3.4.1, 3.3.1, and 2.6.11.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References