FA
Product
Fast-DDS
29
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 22Medium 2Low 0
Watch
Add Fast-DDS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-67108 | 10.0 | Dec 23 | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections Affected: 3.3.0 |
| CVE-2025-62799 | 9.8 | Feb 3 | FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) Affected: 3.4.0 before 3.4.1; 3.0.0 before 3.3.1; before 2.6.11 |
| CVE-2023-50716 | 9.8 | Mar 6 | eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group Affected: before 2.6.7; 2.10.0 before 2.10.3; 2.11.0 before 2.11.3; 2.12.0 before 2.12.2 |
| CVE-2026-22590 | 9.1 | Sep 9 | Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage Affected: < 2.6.12; >= 2.7.0, < 2.14.6; >= 3.0.0, < 3.2.4; >= 3.3.0, < 3.3.1; >= 3.4.0, < 3.4.2 |
| CVE-2021-38425 | 9.1 | May 5 | eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic,… Affected: before 2.4.0 |
Showing 5