Integer overflow in Fast DDS - CVE-2025-65865
Published: November 9, 2026
Vulnerability identifier: #VU162811
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-65865
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated network attacker to crash a Fast DDS process, causing a denial of service.
The vulnerability exists due to an integer underflow in RTPS DataFrag processing when a crafted submessage specifies inconsistent length and QoS values. An unauthenticated network attacker can monitor the target's GUID and entityId information and send crafted UDP packets that trigger an oversized memory copy and crash the process.
Affected software
Fast DDS
How to mitigate CVE-2025-65865
Install security update from vendor's website.
Fast DDS - addressed in versions 2.6.12, 2.14.7, 3.2.5, 3.4.3, 3.6.2