Out-of-bounds Read in Eprosima Fast-Dds
CVE-2025-64098
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If t he fields of `PID_IDENTITY_TOKEN` or `PID_PERMISSIONS_TOKEN` in the DATA Submessage are tampered with — specifically by ta mpering with the the `vecsize` value read by `readOctetVector` — a 32-bit integer overflow can occur, causing `std::vector ::resize` to request an attacker-controlled size and quickly trigger OOM and remote process termination. Versions 3.4.1, 3 .3.1, and 2.6.11 patch the issue.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.005 (37.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 37th percentile — 37.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.005 · change: +0.000
Affected products
- Eprosima Fast-Dds — versions 3.4.0, 3.0.0, 0
- Eprosima Fast Dds — versions 3.4.0
- Debian Linux — versions 11.0, 12.0, 13.0
Weakness classification (CWE)
References
- security-tracker.debian.org/tracker/CVE-2025-64098 (Third Party Advisory)
- github.com/eProsima/Fast-DDS/commit/354218514d32beac963ff5c306f1cf159ee37c5f (Patch)
- github.com/eProsima/Fast-DDS/commit/ced3b6f92d928af1eae77d5fe889878128ad421a (Patch)
- github.com/eProsima/Fast-DDS/commit/a726e6a5daba660418d1f7c05b6f203c17747d2b (Patch)
Frequently asked questions
- What is CVE-2025-64098?
- CVE-2025-64098 is a medium-severity vulnerability in Eprosima Fast-Dds, classified under Out-of-bounds Read. CVSS score: 5.9/10. Published 2026-02-03.
- How severe is CVE-2025-64098?
- Medium severity. CVSS v3 base score is 5.9 out of 10.