Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

eProsima — Vulnerabilities & Security Advisories 25

Browse all 25 CVE security advisories affecting eProsima. AI-powered Chinese analysis, POCs, and references for each vulnerability.

eProsima specializes in developing open-source middleware solutions, primarily focused on the Data Distribution Service (DDS) standard for real-time, high-performance communication in IoT, robotics, and autonomous systems. The company’s software portfolio, including Fast DDS, has been associated with twenty-three recorded Common Vulnerabilities and Exposures (CVEs). Historically, these security issues predominantly involve memory corruption flaws, such as buffer overflows and use-after-free errors, which can lead to remote code execution or denial of service conditions. While cross-site scripting and privilege escalation are less common in this specific middleware context, the complexity of networked data handling introduces risks related to input validation and serialization. Notable incidents have highlighted the critical need for rigorous patch management in industrial control environments where eProsima’s technology is deployed. The firm actively collaborates with the community to address these vulnerabilities, emphasizing the importance of secure coding practices in distributed systems architecture.

Top products by eProsima: Fast-DDS Fast DDS DDS
CVE ID Title CVSS Severity Published
CVE-2026-22591 Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS) — Fast-DDS CWE-400 7.5 High 2026-09-09
CVE-2026-22590 Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG  sampleSize / fragmentsInSubmessage — Fast-DDS CWE-125 9.1 Critical 2026-09-09
CVE-2025-64438 Fast-DDS: Unbounded GAP range triggers OOM DoS under RELIABLE QoS — Fast-DDS CWE-835 7.5AI High AI 2026-02-03
CVE-2025-64098 FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled — Fast-DDS CWE-125 7.5AI High AI 2026-02-03
CVE-2025-62799 FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE) — Fast-DDS CWE-122 9.8AI Critical AI 2026-02-03
CVE-2025-62603 FastDDS has Out-of-memory while parsing GenericMessage when DDS Security is enabled — Fast-DDS CWE-125 9.8AI Critical AI 2026-02-03
CVE-2025-62602 FastDDS has heap buffer overflow in readData via Manipulated DATA Submessage when DDS Security is enabled — Fast-DDS CWE-122 7.5AI High AI 2026-02-03
CVE-2025-62601 FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled — Fast-DDS CWE-122 7.5AI High AI 2026-02-03
CVE-2025-62600 eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled — Fast-DDS CWE-190 8.6 High 2026-02-03
CVE-2025-62599 eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled — Fast-DDS CWE-190 8.6 High 2026-02-03
CVE-2025-24807 Fast DDS does not verify Permissions CA — Fast-DDS CWE-345 9.1 - 2025-02-11
CVE-2023-24010 Data Distribution Service (DDS) Chain of Trust (CoT) violation in Fast DDS — DDS CWE-200 8.2 High 2025-01-09
CVE-2024-30259 FastDDS heap buffer overflow when publisher sends malformed packet — Fast-DDS CWE-120 8.2 High 2024-05-13
CVE-2024-30258 FastDDS crash when publisher send malformed packet — Fast-DDS CWE-20 8.2 High 2024-05-13
CVE-2024-28231 Manipulated DATA Submessage causes a heap-buffer-overflow error — Fast-DDS CWE-122 9.7 Critical 2024-03-20
CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error — Fast-DDS CWE-416 9.7 Critical 2024-03-06
CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2 — Fast-DDS CWE-284 9.7 Critical 2024-02-19
CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS — Fast-DDS CWE-415 8.6 High 2023-10-16
CVE-2023-39949 Improper validation of sequence numbers leading to remotely reachable assertion failure — Fast-DDS CWE-617 7.5 High 2023-08-11
CVE-2023-39948 Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds — Fast-DDS CWE-248 7.5 High 2023-08-11
CVE-2023-39947 Another heap overflow in push_back_helper — Fast-DDS CWE-122 8.2 High 2023-08-11
CVE-2023-39946 Heap overflow in push_back_helper due to a CDR message — Fast-DDS CWE-122 8.2 High 2023-08-11
CVE-2023-39945 Malformed serialized data in a data submessage leads to unhandled exception — Fast-DDS CWE-248 8.2 High 2023-08-11
CVE-2023-39534 Malformed GAP submessage triggers assertion failure — Fast-DDS CWE-617 7.5 High 2023-08-11
CVE-2021-38425 eProsima Fast DDS Network Amplification — Fast DDS CWE-406 7.5 High 2022-05-05

This page lists every published CVE security advisory associated with eProsima. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.