eProsima records
30 published records for vendor eprosima.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 63.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-122 Heap-based Buffer Overflow6
- CWE-190 Integer Overflow or Wraparound4
- CWE-125 Out-of-bounds Read2
- CWE-20 Improper Input Validation2
- CWE-617 Reachable Assertion2
- CWE-248 Uncaught Exception2
The weakness classes this vendor ships most often: where to look.
CWEAll records
30 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-67108No exploit | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connecteprosima · fast dds · CWE-298 | Critical10.0 | — | 0.3% | Dec 23, 2025 |
39Monitor | CVE-2023-50716No exploit | Invalid DATA_FRAG Submessage causes a bad-free erroreprosima · fast dds · CWE-416 | Critical9.8 | — | 0.7% | Mar 6, 2024 |
38Monitor | CVE-2021-38425No exploit | eProsima Fast DDS Network Amplificationeprosima · fast dds · CWE-406 | Critical9.1 | — | 5.0% | May 5, 2022 |
32Monitor | CVE-2023-50257Proof of concept | Disconnect Vulnerability in RTPS Packets Used by SROS2eprosima · fast dds · CWE-284 | High8.1 | — | 0.4% | Feb 19, 2024 |
30Monitor | CVE-2019-15136No exploit | The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, whiceprosima · fast-rtps · CWE-862 | High7.5 | — | 1.3% | Aug 18, 2019 |
30Monitor | CVE-2019-15137No exploit | The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permisseprosima · fast-rtps | High7.5 | — | 1.3% | Aug 18, 2019 |
30Monitor | CVE-2023-39534No exploit | Malformed GAP submessage triggers assertion failureeprosima · fast dds · CWE-617 | High7.5 | — | 1.0% | Aug 11, 2023 |
30Monitor | CVE-2023-39948No exploit | Uncaught fastcdr exception (Unexpected CDR type received) crashing fastddseprosima · fast dds · CWE-248 | High7.5 | — | 1.0% | Aug 11, 2023 |
30Monitor | CVE-2023-39949No exploit | Improper validation of sequence numbers leading to remotely reachable assertion failureeprosima · fast dds · CWE-617 | High7.5 | — | 1.0% | Aug 11, 2023 |
30Monitor | CVE-2023-42459No exploit | Malformed DATA submessage leads to bad-free error in Fast-DDSeprosima · fast dds · CWE-415 | High7.5 | — | 1.0% | Oct 16, 2023 |
30Monitor | CVE-2023-39947No exploit | Another heap overflow in push_back_helpereprosima · fast dds · CWE-122 | High7.5 | — | 0.9% | Aug 11, 2023 |
30Monitor | CVE-2024-28231Proof of concept | Manipulated DATA Submessage causes a heap-buffer-overflow erroreprosima · fast dds · CWE-122 | High7.5 | — | 0.9% | Mar 20, 2024 |
30Monitor | CVE-2023-39945No exploit | Malformed serialized data in a data submessage leads to unhandled exceptioneprosima · fast dds · CWE-248 | High7.5 | — | 0.9% | Aug 11, 2023 |
30Monitor | CVE-2023-39946No exploit | Heap overflow in push_back_helper due to a CDR messageeprosima · fast dds · CWE-122 | High7.5 | — | 0.8% | Aug 11, 2023 |
30Monitor | CVE-2024-30259No exploit | FastDDS heap buffer overflow when publisher sends malformed packeteprosima · fast dds · CWE-120 | High7.5 | — | 0.8% | May 14, 2024 |
30Monitor | CVE-2024-30258No exploit | FastDDS crash when publisher send malformed packeteprosima · fast dds · CWE-20 | High7.5 | — | 0.7% | May 14, 2024 |
30Monitor | CVE-2024-26369No exploit | An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receivingCWE-400 | High7.5 | — | 0.6% | Mar 19, 2024 |
30Monitor | CVE-2025-62600No exploit | eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabledeprosima · fast dds · CWE-190 | High7.5 | — | 0.5% | Feb 3, 2026 |
30Monitor | CVE-2025-65865No exploit | An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.eprosima · fast dds · CWE-190 | High7.5 | — | 0.4% | Dec 23, 2025 |
30Monitor | CVE-2025-62599No exploit | eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabledeprosima · fast dds · CWE-190 | High7.5 | — | 0.4% | Feb 3, 2026 |
30Monitor | CVE-2025-63829No exploit | eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.eprosima · fast dds · CWE-190 | High7.5 | — | 0.3% | Nov 18, 2025 |
28Monitor | CVE-2025-62799No exploit | FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)eprosima · fast dds · CWE-122 | High7.2 | — | 0.5% | Feb 3, 2026 |
28Monitor | CVE-2024-30916No exploit | An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensieprosima · fast dds · CWE-20 | High7.1 | — | 0.2% | Apr 11, 2024 |
22Monitor | CVE-2024-30917No exploit | An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensieprosima · fast dds · CWE-229 | Medium5.5 | — | 0.2% | Apr 11, 2024 |
18Monitor | CVE-2025-24807No exploit | Fast DDS does not verify Permissions CAeprosima · fast dds · CWE-345 | Medium4.5 | — | 0.2% | Feb 11, 2025 |
- CVE-2025-6710840Plan
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connect
CriticalCVSS 10.0No exploitEPSS 0%eprosima · fast ddsDec 23, 2025
- CVE-2023-5071639Monitor
Invalid DATA_FRAG Submessage causes a bad-free error
CriticalCVSS 9.8No exploitEPSS 0%eprosima · fast ddsMar 6, 2024
- CVE-2021-3842538Monitor
eProsima Fast DDS Network Amplification
CriticalCVSS 9.1No exploitEPSS 5%eprosima · fast ddsMay 5, 2022
- CVE-2023-5025732Monitor
Disconnect Vulnerability in RTPS Packets Used by SROS2
HighCVSS 8.1Proof of conceptEPSS 0%eprosima · fast ddsFeb 19, 2024
- CVE-2019-1513630Monitor
The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, whic
HighCVSS 7.5No exploitEPSS 1%eprosima · fast-rtpsAug 18, 2019
- CVE-2019-1513730Monitor
The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permiss
HighCVSS 7.5No exploitEPSS 1%eprosima · fast-rtpsAug 18, 2019
- CVE-2023-3953430Monitor
Malformed GAP submessage triggers assertion failure
HighCVSS 7.5No exploitEPSS 1%eprosima · fast ddsAug 11, 2023
- CVE-2023-3994830Monitor
Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds
HighCVSS 7.5No exploitEPSS 1%eprosima · fast ddsAug 11, 2023
- CVE-2023-3994930Monitor
Improper validation of sequence numbers leading to remotely reachable assertion failure
HighCVSS 7.5No exploitEPSS 1%eprosima · fast ddsAug 11, 2023
- CVE-2023-4245930Monitor
Malformed DATA submessage leads to bad-free error in Fast-DDS
HighCVSS 7.5No exploitEPSS 1%eprosima · fast ddsOct 16, 2023
- CVE-2023-3994730Monitor
Another heap overflow in push_back_helper
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsAug 11, 2023
- CVE-2024-2823130Monitor
Manipulated DATA Submessage causes a heap-buffer-overflow error
HighCVSS 7.5Proof of conceptEPSS 0%eprosima · fast ddsMar 20, 2024
- CVE-2023-3994530Monitor
Malformed serialized data in a data submessage leads to unhandled exception
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsAug 11, 2023
- CVE-2023-3994630Monitor
Heap overflow in push_back_helper due to a CDR message
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsAug 11, 2023
- CVE-2024-3025930Monitor
FastDDS heap buffer overflow when publisher sends malformed packet
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsMay 14, 2024
- CVE-2024-3025830Monitor
FastDDS crash when publisher send malformed packet
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsMay 14, 2024
- CVE-2024-2636930Monitor
An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving
HighCVSS 7.5No exploitEPSS 0%Mar 19, 2024
- CVE-2025-6260030Monitor
eprosima Fast DDS affected by Out-of-Memory in readBinaryPropertySeq via Manipulated DATA Submessage when DDS Security is enabled
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsFeb 3, 2026
- CVE-2025-6586530Monitor
An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsDec 23, 2025
- CVE-2025-6259930Monitor
eprosima Fast DDS affected by Out-of-Memory in readPropertySeq via Manipulated DATA Submessage when DDS Security is enabled
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsFeb 3, 2026
- CVE-2025-6382930Monitor
eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.
HighCVSS 7.5No exploitEPSS 0%eprosima · fast ddsNov 18, 2025
- CVE-2025-6279928Monitor
FastDDS's heap buffer overflow in RTPS DATA_FRAG enables unauthenticated DoS (potential RCE)
HighCVSS 7.2No exploitEPSS 0%eprosima · fast ddsFeb 3, 2026
- CVE-2024-3091628Monitor
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensi
HighCVSS 7.1No exploitEPSS 0%eprosima · fast ddsApr 11, 2024
- CVE-2024-3091722Monitor
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensi
MediumCVSS 5.5No exploitEPSS 0%eprosima · fast ddsApr 11, 2024
- CVE-2025-2480718Monitor
Fast DDS does not verify Permissions CA
MediumCVSS 4.5No exploitEPSS 0%eprosima · fast ddsFeb 11, 2025