Cyclone Data Distribution Service vulnerabilities

2 known vulnerabilities in Cyclone Data Distribution Service from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Cyclone Data Distribution Service: Improper Validation of Certificate Expiration

  CVE-2025-67109Dec 23, 2025Eclipse Foundation

  Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

• 9.1 Critical severity

  Eclipse Cyclone DDS: Integer Underflow (Wrap or Wraparound)

  CVE-2024-10838Mar 12, 2025Eclipse Foundation

  An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which ma