CVE-2025-63829

Опубликовано: 18 нояб. 2025

Источник: nvd

CVSS3: 7.5

CVSS3: 5.3

EPSS Низкий

Описание

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.

Ссылки

https://gist.github.com/lkloliver/b00377bec754d4aa1dc731be210d5889
Exploit
Third Party Advisory
Mitigation
https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/fastdds/core/Time_t.cpp#L67
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*

Версия до 3.3.0 (включая)

EPSS

Процентиль: 17%

0.00055

Низкий

7.5 High

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-190

CWE-835

Связанные уязвимости

CVE-2025-63829

CVSS3: 7.5

ubuntu

3 месяца назад

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.

CVE-2025-63829

CVSS3: 7.5

debian

3 месяца назад

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability c ...

GHSA-8m8h-xwp6-pgjf

CVSS3: 5.3

github

3 месяца назад

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction() function.

EPSS

Процентиль: 17%

0.00055

Низкий

7.5 High

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-190

CWE-835