CVE-2025-64098 — FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled

Back Back to CVE browser

LOW

FastDDS has Out-of-memory in readOctetVector via Manipulated DATA Submessage when DDS Security is enabled

Published Feb 3, 2026

1.7

LOW

CVSS 4.0

EPSS 0.46%

Description

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS. If t he fields of `PID_IDENTITY_TOKEN` or `PID_PERMISSIONS_TOKEN` in the DATA Submessage are tampered with — specifically by ta mpering with the the `vecsize` value read by `readOctetVector` — a 32-bit integer overflow can occur, causing `std::vector ::resize` to request an attacker-controlled size and quickly trigger OOM and remote process termination. Versions 3.4.1, 3 .3.1, and 2.6.11 patch the issue.

Affected products

Vendor eProsima Product Fast-DDS Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2.6.11
- Version
  3.0.0
  Status
  affected
  Constraints
  <3.3.1
- Version
  3.4.0
  Status
  affected
  Constraints
  <3.4.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

eProsima

Fast-DDS

unaffected

Version	Status	Constraints
0	affected	<2.6.11
3.0.0	affected	<3.3.1
3.4.0	affected	<3.4.1

Remediation

No remediation recorded yet.

Metrics

0.46% 0.00461

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00461

Score over time

Feb–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.46% (0.00461)	37.63th	v5 (v2026.06.15)
Jun 15, 2026	0.43% (0.00434)	34.41th	v5 (v2026.06.15)
Feb 4, 2026	0.01% (0.00010)	0.99th	v4 (v2025.03.14)

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-190

Integer Overflow

References (4)

Link	Providers	Tags
https://github.com/eProsima/Fast-DDS/commit/354218514d32beac963ff5c306f1cf159ee37c5f		Patch
https://github.com/eProsima/Fast-DDS/commit/a726e6a5daba660418d1f7c05b6f203c17747d2b		Patch
https://github.com/eProsima/Fast-DDS/commit/ced3b6f92d928af1eae77d5fe889878128ad421a		Patch
https://security-tracker.debian.org/tracker/CVE-2025-64098		Third Party Advisory