Status of CVEs (CVE-2025-63829, CVE-2025-65865, CVE-2025-67108)

[AbhishekTiwari07]

The following CVEs are listed for eProsima/Fast-DDS:

• CVE-2025-63829
• CVE-2025-65865
• CVE-2025-67108

At the moment, I have not been able to identify any associated fixes, release notes, or mitigation guidance in the public repository.

Could you please clarify their current status and whether patches are planned or already available? If fixes exist, I would appreciate being directed to the relevant commits, branches, or release versions.

Apologies if I have missed any information or if the fixes are currently in a private or unreleased branch.

[MiguelCompany]

Hi @AbhishekTiwari07.

Thank you for your concerns regarding CVEs in Fast DDS.

The ones you mention were not reported to us, so we were not aware of them.
The official place to report vulnerabilities is the Report a vulnerability button here.

I suggest you perform a report for each of the CVEs, so we can privately assess and fix them.

We will remove this conversation afterwards.