The vulnerability CVE-2025-64438 affects eProsima Fast-DDS, a C++ implementation of the OMG DDS standard used for real-time data distribution. In versions prior to 3.4.1, 3.3.1, and 2.6.11, an attacker can remotely trigger an infinite loop within the StatefulReader::processGapMsg() function by sending a crafted RTPS GAP submessage with a large gap range. This causes the function to insert an excessive number of sequence numbers into the WriterProxy::changes_received_ set, a data structure implemented as a std::set, resulting in unbounded memory allocation. The memory consumption can grow to tens of gigabytes (observed up to ~64 GB), leading to out-of-memory conditions and process crashes, effectively causing a denial-of-service (DoS). The attack requires no authentication beyond network access to the DDS domain reader, making it remotely exploitable. The vulnerability stems from a loop with an unreachable exit condition (CWE-835), where the logic does not properly limit the number of iterations when processing the gap list. The issue is patched in Fast-DDS versions 3.4.1, 3.3.1, and 2.6.11. No known exploits have been reported in the wild as of the publication date.

For European organizations, the impact of this vulnerability depends on the deployment of Fast-DDS in critical infrastructure, industrial automation, automotive, aerospace, or other real-time systems that rely on DDS for data communication. Exploitation can cause denial-of-service by exhausting system memory, leading to service interruptions and potential safety risks in operational technology environments. Organizations with network-exposed DDS readers are at risk without requiring authentication, increasing the attack surface. The large memory consumption can also affect system stability and availability, potentially disrupting business-critical processes. While the CVSS score is low, the operational impact in real-time or safety-critical systems can be significant. European sectors such as manufacturing, automotive, and defense that use DDS-based middleware should be particularly vigilant.

1. Upgrade eProsima Fast-DDS to versions 3.4.1, 3.3.1, or 2.6.11 or later where the vulnerability is patched. 2. Implement network segmentation and restrict access to DDS domain readers to trusted hosts only, minimizing exposure to untrusted networks. 3. Employ network-level filtering to block malformed or suspicious RTPS GAP submessages, if feasible. 4. Monitor memory usage of Fast-DDS processes and set resource limits to prevent excessive memory consumption. 5. Use intrusion detection systems capable of recognizing anomalous DDS traffic patterns. 6. Conduct regular security assessments of DDS deployments, including penetration testing focused on protocol fuzzing. 7. Where possible, enable authentication and encryption features of DDS to reduce unauthorized access risk. 8. Maintain up-to-date incident response plans for denial-of-service scenarios affecting real-time communication middleware.