EclipseCyclone Data Distribution Service*
2 matches found
CVE-2024-10838
CVE-2024-10838 — Concrete details : The vulnerability affects Eclipse Cyclone DDS (DDS) and is due to an integer underflow in the DDS_Security_Deserialize_ methods during deserialization, which can enable an unauthenticated attacker to read out-of-bounds heap memory. The impact per documents incl...
9.1CVSS5.9AI score0.00949EPSS
Save
CVE-2025-67109
Eclipse Cyclone DDS versions prior to 0.10.5 are vulnerable to a flaw where the time certificate is improperly verified. This verification failure, specifically within the dds_time function, allows attackers to bypass certificate checks and execute arbitrary commands with System privileges . To m...
10CVSS6AI score0.00328EPSS
Save