CVE-2025-62601 FastDDS has heap buffer overflow in readString via Manipulated DATA Submessage when DDS Security is enabled
Remote attackers can cause denial of service in FastDDS by sending manipulated packets when security is enabled, requiring an upgrade to patched versions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-62601?
CVE-2025-62601 is a low-severity memory corruption vulnerability in eProsima Fast-DDS, published on 3 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes a heap buffer overflow, resulting in remote termination of Fast-DDS. If the fields of `PID_IDENTITY_TOKEN` or `PID_PERMISSIONS_TOKEN` in the DATA Submessage — specifically by tampering with the `str_size` value read by `readString` (called from `readBinaryProperty`) — are modified, a 32-bit integer overflow can occur, causing `std::vector::resize` to use an attacker-controlled size and quickly trigger heap buffer overflow and remote process term ination. Versions 3.4.1, 3.3.1, and 2.6.11 patch the issue.
Which versions are affected by CVE-2025-62601?
It affects 1 product.
Products include Eprosima Fast Dds.
How do I fix CVE-2025-62601?
No fix has been published for CVE-2025-62601 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-62601 being exploited?
There is no known exploitation of CVE-2025-62601 in the wild and no public exploit code.
Other vulnerabilities in eProsima Fast-DDS
- CVE-2025-67108 Security feature bypass in n/a
- CVE-2024-28231 Manipulated DATA Submessage causes a heap-buffer-overflow error
- CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error
- CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2
- CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS
Sources
Also known as DEBIAN-CVE-2025-62601, UBUNTU-CVE-2025-62601.