CVE-2025-62599

CVE-2025-62599 affects Fast DDS (DDS implementation). When security mode is enabled, modifying the DATA Submessage within an SPDP packet (PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN) by tampering with the length field in readPropertySeq causes an Out-Of-Memory (OOM) and remote termination. Affecte...

CVE-2025-62599 FastDDS has Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group . Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory OOM...