Fast-DDS Denial of Service

HIGH (7.5) No Patch

Threat Intelligence

Low Risk
🔍 Detection Tools: None available in major open-source tools
⚔️ Exploit Availability: No public exploits found

How we test →

What is it?

eProsima Fast-DDS is a C++ library used for high-performance data synchronization. This vulnerability allows attackers to cause a Denial of Service (DoS) by crafting a malicious input that triggers an integer overflow, leading to a crash.

Am I affected?

You're affected if you use eProsima Fast-DDS v3.3. Check with: git grep -r "fast-dds" /path/to/your/project or find / -name "fast-dds*.so" (Note: This is not a straightforward check, and you may need to inspect your project's dependencies manually.)

If you don't recognize eProsima Fast-DDS as a library used in your projects, you're probably not affected. This software is relatively niche, so it's essential to verify if the vulnerability affects your specific use case.

Version info: Affected versions are 3.3 (2025 through 65865).

Affected Products

eProsima Software GmbH / Fast-DDS

How to fix

Upgrade to eProsima Fast-DDS v3.4 or later from their official GitHub repository: https://github.com/eprosima/fast-dds/releases
- Immediate mitigations:
- Disable the affected library in your project.
- Monitor system logs for potential crashes.