Infinite Loop Vulnerability in eProsima Fast-DDS from eProsima
CVE-2025-63829

5.3MEDIUM

Key Information:

Vendor

eProsima

Status
Fast-DDS
Vendor
CVE Published:
18 November 2025

What is CVE-2025-63829?

An infinite loop vulnerability exists in eProsima Fast-DDS versions 3.3 and earlier, stemming from an integer overflow in the Time_t::fraction() function. This can lead to a denial of service by causing the application to hang indefinitely, preventing normal operations and affecting overall system performance. Developers are advised to assess their use of this library and implement necessary updates to mitigate the issue.

References

https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/...
https://gist.github.com/lkloliver/b00377bec754d4aa1dc731b...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.