Is CVE-2025-62600 actively exploited?

No active exploitation of CVE-2025-62600 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-62600 be exploited remotely?

Yes. CVE-2025-62600 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-62600?

CVE-2025-62600 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2025-62600

HIGH

CVE-2025-62600

CWE-190Published: February 3, 2026· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes an Out-Of-Memory (OOM) condition, resulting in remote termination of Fast-DDS.

If the fields of PID_IDENTITY_TOKEN or PID_PERMISSION_TOKEN in the DATA Submessage — specifically by tampering with the length field in readBinaryPropertySeq— are modified, an integer overflow occurs, leading to an OOM during the resize operation. This vulnerability is fixed in 2.6.11, 2.14.6, 3.2.4, 3.3.1, and 3.4.1.

NVD Source

Technical Analysis

CVE-2025-62600 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.