CVE-2025-64438: Rtps Unbounded Gap Iteration

Unbounded iteration from a sequence number up to a sequence number set's `base()`. In RTPS and DDS protocols, an attacker can craft a gap message with a huge difference between the start and base sequence numbers. This causes memory exhaustion (OOM) when arbitrary sequence numbers are inserted into internal states, or high CPU consumption due to massive O(N)

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2025-64438-rtps-unbounded-gap-iteration --engine opengrep

Description

Unbounded iteration from a sequence number up to a sequence number set's `base()`. In RTPS and DDS protocols, an attacker can craft a gap message with a huge difference between the start and base sequence numbers. This causes memory exhaustion (OOM) when arbitrary sequence numbers are inserted into internal states, or high CPU consumption due to massive O(N)