{"id":"UBUNTU-CVE-2025-62603","details":"Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ParticipantGenericMessage is the DDS Security control-message container that carries not only the handshake but also on going security-control traffic after the handshake, such as crypto-token exchange, rekeying, re-authentication, and token delivery for newly appearing endpoints. On receive, the CDR parser is invoked first and deserializes the `message_data` (i .e., the `DataHolderSeq`) via the `readParticipantGenericMessage → readDataHolderSeq` path. The `DataHolderSeq` is parsed sequentially: a sequence count (`uint32`), and for each DataHolder the `class_id` string (e.g. `DDS:Auth:PKI-DH:1.0+Req`),  string properties (a sequence of key/value pairs), and binary properties (a name plus an octet-vector). The parser operat es at a stateless level and does not know higher-layer state (for example, whether the handshake has already completed), s o it fully unfolds the structure before distinguishing legitimate from malformed traffic. Because RTPS permits duplicates,  delays, and retransmissions, a receiver must perform at least minimal structural parsing to check identity and sequence n umbers before discarding or processing a message; the current implementation, however, does not \"peek\" only at a minimal  header and instead parses the entire `DataHolderSeq`. As a result, prior to versions 3.4.1, 3.3.1, and 2.6.11, this parsi ng behavior can trigger an out-of-memory condition and remotely terminate the process. Versions 3.4.1, 3.3.1, and 2.6.11 p atch the issue.","modified":"2026-05-20T16:23:39.946103929Z","published":"2026-02-03T20:15:00Z","upstream":["CVE-2025-62603"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-62603"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2025-62603"},{"type":"REPORT","url":"https://github.com/eProsima/Fast-DDS/commit/354218514d32beac963ff5c306f1cf159ee37c5f"}],"affected":[{"package":{"name":"fastdds","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/fastdds?arch=source&distro=esm-apps%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0+ds-9","2.4.1+ds-1","2.5.0+ds-3","2.5.0+ds-3ubuntu0.1~esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"fastdds-tools","binary_version":"2.5.0+ds-3ubuntu0.1~esm1"},{"binary_name":"libfastrtps2.5","binary_version":"2.5.0+ds-3ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-62603.json"}},{"package":{"name":"fastdds","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/fastdds?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.1+ds-3","2.11.2+ds-6","2.11.2+ds-6ubuntu1","2.11.2+ds-6.1build2","2.11.2+ds-6.1build3"],"ecosystem_specific":{"binaries":[{"binary_name":"fastdds-tools","binary_version":"2.11.2+ds-6.1build3"},{"binary_name":"libfastrtps2.11t64","binary_version":"2.11.2+ds-6.1build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-62603.json"}},{"package":{"name":"fastdds","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/fastdds?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+ds-1","3.1.2+ds-1build1"],"ecosystem_specific":{"binaries":[{"binary_version":"3.1.2+ds-1build1","binary_name":"fastdds-tools"},{"binary_name":"libfastdds3.1","binary_version":"3.1.2+ds-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-62603.json"}},{"package":{"name":"fastdds","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/fastdds?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+ds-1build1","3.3.0+ds-3ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"fastdds-tools","binary_version":"3.3.0+ds-3ubuntu1"},{"binary_name":"libfastdds3.3","binary_version":"3.3.0+ds-3ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-62603.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}