Lucene search
+L
EclipseCyclone Data Distribution Service*

2 matches found

CVE
CVE
added 2025/03/12 1:3 p.m.63 views

CVE-2024-10838

CVE-2024-10838 — Concrete details : The vulnerability affects Eclipse Cyclone DDS (DDS) and is due to an integer underflow in the DDS_Security_Deserialize_ methods during deserialization, which can enable an unauthenticated attacker to read out-of-bounds heap memory. The impact per documents incl...

9.1CVSS6.8AI score0.00876EPSS
Save
CVE
CVE
added 2025/12/23 12:0 a.m.17 views

CVE-2025-67109

The CVE-2025-67109 entry concerns Eclipse Cyclone DDS prior to version 0.10.5, with a root cause described as improper verification of the time certificate. This weakness allows an attacker to bypass certificate checks and execute commands with System privileges. Multiple sources corroborate the ...

10CVSS6.9AI score0.00298EPSS
Save