# eProsima Fast-DDS.

Every CVE that names eProsima Fast-DDS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)](https://agentprime.io/advisories/CVE-2026-22591.md)
  `CVE-2026-22591` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Denial of service
- [Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage](https://agentprime.io/advisories/CVE-2026-22590.md)
  `CVE-2026-22590` · CVE record: eProsima Fast-DDS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS](https://agentprime.io/advisories/CVE-2025-64438.md)
  `CVE-2025-64438` · CVE record: eProsima Fast-DDS · CVSS 1.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Denial of service
- [FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-64098.md)
  `CVE-2025-64098` · CVE record: eProsima Fast-DDS · CVSS 1.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption
- [FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)](https://agentprime.io/advisories/CVE-2025-62799.md)
  `CVE-2025-62799` · CVE record: eProsima Fast-DDS · CVSS 7.2 High · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption
- [FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-62603.md)
  `CVE-2025-62603` · CVE record: eProsima Fast-DDS · CVSS 1.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption
- [FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-62602.md)
  `CVE-2025-62602` · CVE record: eProsima Fast-DDS · CVSS 1.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption
- [FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-62601.md)
  `CVE-2025-62601` · CVE record: eProsima Fast-DDS · CVSS 1.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption
- [eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-62600.md)
  `CVE-2025-62600` · CVE record: eProsima Fast-DDS · CVSS 8.6 High · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption, Denial of service
- [eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled](https://agentprime.io/advisories/CVE-2025-62599.md)
  `CVE-2025-62599` · CVE record: eProsima Fast-DDS · CVSS 8.6 High · Not analysed yet · Published 3 Feb 2026 · Tags: Memory corruption, Denial of service
- [Fast DDS does not verify Permissions CA](https://agentprime.io/advisories/CVE-2025-24807.md)
  `CVE-2025-24807` · CVE record: eProsima Fast-DDS · CVSS 4.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-345
- [FastDDS heap buffer overflow when publisher sends malformed packet](https://agentprime.io/advisories/CVE-2024-30259.md)
  `CVE-2024-30259` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 13 May 2024 · Tags: Memory corruption
- [FastDDS crash when publisher send malformed packet](https://agentprime.io/advisories/CVE-2024-30258.md)
  `CVE-2024-30258` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 13 May 2024 · Tags: CWE-20
- [Manipulated DATA Submessage causes a heap-buffer-overflow error](https://agentprime.io/advisories/CVE-2024-28231.md)
  `CVE-2024-28231` · CVE record: eProsima Fast-DDS · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2024 · Tags: Memory corruption
- [Invalid DATA_FRAG Submessage causes a bad-free error](https://agentprime.io/advisories/CVE-2023-50716.md)
  `CVE-2023-50716` · CVE record: eProsima Fast-DDS · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Mar 2024 · Tags: Memory corruption
- [Disconnect Vulnerability in RTPS Packets Used by SROS2](https://agentprime.io/advisories/CVE-2023-50257.md)
  `CVE-2023-50257` · CVE record: eProsima Fast-DDS · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Feb 2024 · Tags: Broken access control
- [Malformed DATA submessage leads to bad-free error in Fast-DDS](https://agentprime.io/advisories/CVE-2023-42459.md)
  `CVE-2023-42459` · CVE record: eProsima Fast-DDS · CVSS 8.6 High · Not analysed yet · Published 16 Oct 2023 · Tags: Memory corruption, CWE-590
- [Improper validation of sequence numbers leading to remotely reachable assertion failure](https://agentprime.io/advisories/CVE-2023-39949.md)
  `CVE-2023-39949` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: Denial of service
- [Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds](https://agentprime.io/advisories/CVE-2023-39948.md)
  `CVE-2023-39948` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-248
- [Another heap overflow in push_back_helper](https://agentprime.io/advisories/CVE-2023-39947.md)
  `CVE-2023-39947` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2023 · Tags: Memory corruption
- [Heap overflow in push_back_helper due to a CDR message](https://agentprime.io/advisories/CVE-2023-39946.md)
  `CVE-2023-39946` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2023 · Tags: Memory corruption
- [Malformed serialized data in a data submessage leads to unhandled exception](https://agentprime.io/advisories/CVE-2023-39945.md)
  `CVE-2023-39945` · CVE record: eProsima Fast-DDS · CVSS 8.2 High · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-248
- [Malformed GAP submessage triggers assertion failure](https://agentprime.io/advisories/CVE-2023-39534.md)
  `CVE-2023-39534` · CVE record: eProsima Fast-DDS · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: Denial of service
- [eProsima Fast DDS Network Amplification](https://agentprime.io/advisories/CVE-2021-38425.md)
  `CVE-2021-38425` · CVE record: eProsima Fast DDS · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-406

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=eprosima-fast-dds>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/eprosima-fast-dds/>. Everything for agents: <https://agentprime.io/llms.txt>.