CNNVD-202602-270 Information
CNNVD ID
CNNVD-202602-270
Related CVE
- CNNVD Published: 2026-02-03
Description (Chinese)
eProsima Fast DDS是eProsima公司的OMG（对象管理组）DDS（数据分发服务）标准的 C++ 实现。 eProsima Fast DDS 3.4.1之前版本、3.3.1之前版本和2.6.11之前版本存在缓冲区错误漏洞，该漏洞源于解析ParticipantGenericMessage消息时未进行最小化解析，可能引发内存耗尽和远程进程终止。
Description (English)
eProsima Fast DDS is a C++ standard for the OMG (target management group) DDS (data distribution services) of eProsima. Pre-Prosima Fast DDS 3.4.1, pre-3.3.1 and pre-2.6.11 there is an error loophole in the buffer zone, which stems from the failure to perform a minimal decomposition when deciphering Participant General Message messages, which could trigger the depletion of memory and the termination of remote processes.
Hazard Level
High
Vulnerability Type
缓冲区错误
Affected Vendor
eProsima
Published
2026-02-03
Last Modified
2026-02-24
References
https://github.com/eProsima/Fast-DDS/commit/354218514d32beac963ff5c306f1cf159ee37c5f https://github.com/eProsima/Fast-DDS/commit/ced3b6f92d928af1eae77d5fe889878128ad421a https://security-tracker.debian.org/tracker/CVE-2025-62603 https://github.com/eProsima/Fast-DDS/commit/a726e6a5daba660418d1f7c05b6f203c17747d2b https://access.redhat.com/security/cve/cve-2025-62603
Patch
https://github.com/eProsima/Fast-DDS/releases
Share on: