CVE-2025-62599

highpriority · track · 30EPSS 0.004 · 35 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.41% (35th) EPSS

CVSS 7.5 · high

Is it mine?

11 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-28

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by tampering with the length field in readPropertySeq — are modified, an integer overflow occurs, leading to an OOM during the resize operation. This vulnerability is fixed in 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1.

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–8.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · ENISA EU

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · security-advisories@github.comexploitability 3.9 · impact 4

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-190USCWE-789US

affected products (11)

Products and version ranges known to be affected.

eProsima Fast-DDS≤ < 2.6.11enisa_euvdEU
eProsima Fast-DDS2.7.0, → 2.14.6enisa_euvdEU
eProsima Fast-DDS3.0.0, → 3.2.4enisa_euvdEU
eProsima Fast-DDS3.3.0, → 3.3.1enisa_euvdEU
eProsima Fast-DDS3.4.0, → 3.4.2enisa_euvdEU
debian debian linux= 11.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
debian debian linux= 12.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
debian debian linux= 13.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
eprosima fast dds< 2.6.11nvdUScpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*
eprosima fast dds3.0.0 → 3.3.1nvdUScpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*
eprosima fast dds= 3.4.0nvdUScpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2026-02-03modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan