CD
Product
Cyclone Data Distribution Service
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch
Add Cyclone Data Distribution Service to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67109 | 10.0 | Dec 23 | Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges Affected: before 0.10.5 |
| CVE-2024-10838 | 9.1 | Mar 12 | An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory Affected: before 0.10.5 |
| CVE-2020-18735 | 7.5 | Aug 23 | A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash Affected: 0.1.0 |
| CVE-2020-18734 | 7.5 | Aug 23 | A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash Affected: 0.1.0 |
Showing 4