CVE-2025-65865

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input

High · published December 23, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
33.5
In the wild
Unconfirmed
What it is

⚡ A crafty integer overflow in eProsima Fast-DDS v3.3 can turn your system into a digital ghost town! Think of this overflow as a delivery truck that accidentally oversizes its load — it can't fit through the loading dock, causing a total backlog of deliveries. This is how the overflow can disrupt the normal operation, effectively halting services! If exploited, this vulnerability allows an attacker to trigger a Denial of Service (DoS), making your applications inaccessible. It’s like locking the doors to your shop during peak hours — customers can’t get in, and your service is effectively down!

Put simply

Think of this overflow as a delivery truck that accidentally oversizes its load — it can't fit through the loading dock, causing a total backlog of deliveries. This is how the overflow can disrupt the normal operation, effectively halting services! This integer overflow flaw allows attackers to manipulate inputs, leading to unexpected behavior and potential service disruption in eProsima Fast-DDS v3.3. Essentially, it overstresses the system's handling capabilities, causing it to crash or become unresponsive.

What to do

If exploited, this vulnerability allows an attacker to trigger a Denial of Service (DoS), making your applications inaccessible. It’s like locking the doors to your shop during peak hours — customers can’t get in, and your service is effectively down! To stay safe, upgrade eProsima Fast-DDS to the latest version that patches this vulnerability. Additionally, review and sanitize all inputs to prevent such overflows from crashing your systems. Don't wait — act now to bolster your defenses! You’ve got this! By following these steps, you can keep your systems running smoothly and securely. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.5th percentile
Published
2025-12-23T00:00Z
EPSS history
Timeline
  • 23 DEC 00:00Z
    An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input
    cvelistv5