Eprosima vulnerabilities
25 CVEs and advisories name Eprosima as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-22591Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
- CVE-2026-22590Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage
- CVE-2025-64438Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS
- CVE-2025-64098FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled
- CVE-2025-62799FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)
- CVE-2025-62603FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled
- CVE-2025-62602FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled
- CVE-2025-62601FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled
- CVE-2025-62600eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled
- CVE-2025-62599eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled
- CVE-2025-24807Fast DDS does not verify Permissions CA
- CVE-2023-24010Data Distribution Service (DDS) Chain of Trust (CoT) violation in Fast DDS
- CVE-2024-30259FastDDS heap buffer overflow when publisher sends malformed packet
- CVE-2024-30258FastDDS crash when publisher send malformed packet
- CVE-2024-28231Manipulated DATA Submessage causes a heap-buffer-overflow error
- CVE-2023-50716Invalid DATA_FRAG Submessage causes a bad-free error
- CVE-2023-50257Disconnect Vulnerability in RTPS Packets Used by SROS2
- CVE-2023-42459Malformed DATA submessage leads to bad-free error in Fast-DDS
- CVE-2023-39949Improper validation of sequence numbers leading to remotely reachable assertion failure
- CVE-2023-39948Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds
- CVE-2023-39947Another heap overflow in push_back_helper
- CVE-2023-39946Heap overflow in push_back_helper due to a CDR message
- CVE-2023-39945Malformed serialized data in a data submessage leads to unhandled exception
- CVE-2023-39534Malformed GAP submessage triggers assertion failure
- CVE-2021-38425eProsima Fast DDS Network Amplification