CVE-2025-63829

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function

Medium · published November 18, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

⚠️ An infinite loop could keep your system spinning its wheels! In eProsima Fast-DDS v3.3 and earlier, there's a sneaky integer overflow lurking in the Time_t::fraction() function. 🔄 Think of it like a hamster on a wheel that just won't stop running. No matter how much it tries, it's stuck in that loop and can't get off, leading to wasted energy and resources! This vulnerability could result in a denial of service, as your application may become unresponsive, endlessly caught in the loop. While not immediately catastrophic, it can degrade service performance and frustrate users. Remember, even medium-severity flaws can lead to bigger troubles down the line.

Put simply

Think of it like a hamster on a wheel that just won't stop running. No matter how much it tries, it's stuck in that loop and can't get off, leading to wasted energy and resources! The infinite loop stems from an integer overflow in the Time_t::fraction() function, causing the system to endlessly iterate without a way to exit or recover from the error. This can lead to high CPU usage and slowdowns.

What to do

This vulnerability could result in a denial of service, as your application may become unresponsive, endlessly caught in the loop. While not immediately catastrophic, it can degrade service performance and frustrate users. Remember, even medium-severity flaws can lead to bigger troubles down the line. To address this issue, upgrade to the latest version of eProsima Fast-DDS immediately. Ensure your code handles edge cases for integer operations properly to prevent similar vulnerabilities in the future. Regularly review your application logs to detect any anomalies early on. You've got this! By applying these steps, you'll keep your systems running smoothly and secure. 🛡️

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.2th percentile
Published
2025-11-18T00:00Z
EPSS history
Timeline
  • 18 NOV 00:00Z
    eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function
    cvelistv5