CVE-2025-62602

CVE-2025-62602 describes a heap buffer overflow vulnerability in Fast DDS, a C++ implementation of the DDS standard, affecting versions prior to 3.4.1, 3.3.1, and 2.6.11. When security mode is enabled, manipulating specific fields within the DATA Submessage of an SPDP packet can lead to a 32-bit integer overflow during length calculation, causing a large allocation attempt and subsequent out-of-memory error. This results in a remotely-triggerable denial-of-service and process termination. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a severe impact. It can be exploited remotely with low attack complexity and no user interaction, leading to high availability impact (A:H) but no confidentiality or integrity impact (C:N, I:N). Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.