Eprosima
Eprosima Fast DDS: vulnerabilidades y CVE
Eprosima Fast DDS tiene 29 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE29
Últimos 12 meses13
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-22591 | Alta (7.5) | 0.32% | — | 9 sept 2026 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.12, 2.14.6, 3.2.4, and 3.4.3, Fast DDS’s implementation of SQL‑based… |
| CVE-2026-22590 | Crítica (9.1) | 0.38% | — | 9 sept 2026 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable… |
| CVE-2025-64438 | Baja (1.7) | 0.57% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, a remotely triggerable Out-of-Memory (OOM)… |
| CVE-2025-64098 | Baja (1.7) | 0.46% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA… |
| CVE-2025-62799 | Alta (7.2) | 0.51% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, a heap buffer overflow exists in the Fast-DDS DATA_FRAG… |
| CVE-2025-62603 | Baja (1.7) | 0.53% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ParticipantGenericMessage is the DDS Security control-message container that carries not only the… |
| CVE-2025-62602 | Baja (1.7) | 0.52% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA… |
| CVE-2025-62601 | Baja (1.7) | 0.56% | — | 3 feb 2026 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA… |
| CVE-2025-62600 | Alta (7.5) | 0.44% | — | 3 feb 2026 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled,… |
| CVE-2025-62599 | Alta (7.5) | 0.38% | — | 3 feb 2026 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled,… |
| CVE-2025-67108 | Crítica (10) | 0.31% | — | 23 dic 2025 | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections. |
| CVE-2025-65865 | Alta (7.5) | 0.40% | — | 23 dic 2025 | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2025-63829 | Alta (7.5) | 0.32% | — | 18 nov 2025 | eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function. |
| CVE-2025-24807 | Media (4.5) | 0.20% | — | 11 feb 2025 | eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design,… |
| CVE-2024-30259 | Alta (7.5) | 0.87% | — | 14 may 2024 | FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet,… |
| CVE-2024-30258 | Alta (7.5) | 0.79% | — | 14 may 2024 | FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS`… |
| CVE-2024-30917 | Media (5.5) | 0.22% | — | 11 abr 2024 | An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_depth parameter in DurabilityService QoS… |
| CVE-2024-30916 | Alta (7.1) | 0.24% | — | 11 abr 2024 | An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted max_samples parameter in DurabilityService QoS… |
| CVE-2024-28231 | Alta (7.5) | 0.94% | — | 20 mar 2024 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a… |
| CVE-2023-50716 | Crítica (9.8) | 0.72% | — | 6 mar 2024 | eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG… |
| CVE-2023-50257 | Alta (8.1) | 0.48% | — | 19 feb 2024 | eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and… |
| CVE-2023-42459 | Alta (7.5) | 0.83% | — | 16 oct 2023 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger… |
| CVE-2023-39949 | Alta (7.5) | 1.0% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely… |
| CVE-2023-39948 | Alta (7.5) | 1.0% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast… |
| CVE-2023-39947 | Alta (7.5) | 0.96% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed… |
| CVE-2023-39946 | Alta (7.5) | 0.89% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, heap can be overflowed by providing a… |
| CVE-2023-39945 | Alta (7.5) | 0.94% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5, a data submessage sent to PDP port raises unhandled… |
| CVE-2023-39534 | Alta (7.5) | 1.0% | — | 11 ago 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure,… |
| CVE-2021-38425 | Crítica (9.1) | 5.2% | — | 5 may 2022 | eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic, which may result in a denial-of-service… |