eProsima vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-22591 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 7.5 · Sep 9, 2026
• CVE-2026-22590 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).Critical 9.1 · Sep 9, 2026
• CVE-2025-62799 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ).High 7.2 · Feb 3, 2026
• CVE-2025-62600 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 8.6 · Feb 3, 2026
• CVE-2025-62599 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 8.6 · Feb 3, 2026
• CVE-2025-67108 eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.Critical 10 · Dec 23, 2025
• CVE-2025-65865 An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.High 7.5 · Dec 23, 2025
• CVE-2025-63829 eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.High 7.5 · Nov 18, 2025
• CVE-2023-24010 An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure High 8.2 · Jan 9, 2025
• CVE-2024-30259 FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 8.2 · May 14, 2024
• CVE-2024-30258 FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 8.2 · May 14, 2024
• CVE-2024-30916 An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information viaHigh 7.1 · Apr 11, 2024
• CVE-2024-28231 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.Critical 9.6 · Mar 20, 2024
• CVE-2024-26369 An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data.High 7.5 · Mar 19, 2024
• CVE-2023-50716 eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group.Critical 9.6 · Mar 6, 2024
• CVE-2023-50257 eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group.Critical 9.6 · Feb 19, 2024
• CVE-2023-42459 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group).High 8.6 · Oct 16, 2023
• CVE-2023-39949 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 7.5 · Aug 11, 2023
• CVE-2023-39948 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 7.5 · Aug 11, 2023
• CVE-2023-39947 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 8.2 · Aug 11, 2023
• CVE-2023-39946 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 8.2 · Aug 11, 2023
• CVE-2023-39945 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 8.2 · Aug 11, 2023
• CVE-2023-39534 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group.High 7.5 · Aug 11, 2023
• CVE-2021-38425 eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device witHigh 7.5 · May 5, 2022
• CVE-2019-15137 The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themHigh 7.5 · Aug 18, 2019