Lucene search
+L
EclipseCyclone Data Distribution Service*

2 matches found

CVE
CVE
•added 2025/03/12 1:03 p.m.•90 views

CVE-2024-10838

CVE-2024-10838 — Concrete details : The vulnerability affects Eclipse Cyclone DDS (DDS) and is due to an integer underflow in the DDS_Security_Deserialize_ methods during deserialization, which can enable an unauthenticated attacker to read out-of-bounds heap memory. The impact per documents incl...

9.1CVSS5.9AI score0.00949EPSS
Save
CVE
CVE
•added 2025/12/23 12:00 a.m.•38 views

CVE-2025-67109

Eclipse Cyclone DDS versions prior to 0.10.5 are vulnerable to a flaw where the time certificate is improperly verified. This verification failure, specifically within the dds_time function, allows attackers to bypass certificate checks and execute arbitrary commands with System privileges . To m...

10CVSS6AI score0.00328EPSS
Save