Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-65865: eProsima Fast-DDS v3.3: Denial of Service via Malicious Input

CVE-2025-65865 · published 10 months ago

Summary

A vulnerability in eProsima Fast-DDS version 3.3 allows attackers to crash the system by sending a specially crafted input. This can cause downtime and disrupt services. Update to the latest version of eProsima Fast-DDS to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	eprosima	fast_dds	3.3.0 `cpe:2.3:a:eprosima:fast_dds:3.3.0:::::::*`
Ubuntu:Pro:22.04:LTS	canonical	fastdds	All versions

Original advisory text

An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References

http://eprosima.com Third Party Advisory
http://fast-dds.com Third Party Advisory
https://gist.github.com/lkloliver/7aa48cb9fc7a1dd74cb595212bb69d33 Third Party Advisory
https://github.com/lkloliver/poc/blob/main/Detail.md Broken Link Exploit
https://ubuntu.com/security/CVE-2025-65865 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-65865 Third Party Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65865... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-65865 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-190Integer Overflow

Timeline

Published23 Dec 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-65865 · NVD

CVE-2025-65865 · MITRE

UBUNTU-CVE-2025-65865 · OSV

CVE-2025-65865 · OSV

Track software like this

Free during beta