CVE-2025-63547
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSummary
CVE-2025-63547 is a high-severity Buffer Access with Incorrect Length Value (CWE-805) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 29th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to SA-11 (Developer Testing and Evaluation) and SA-8 (Security and Privacy Engineering Principles) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2025-63547 is a denial-of-service vulnerability in Eprosima Micro-XRCE-DDS Agent version 3.0.1. The flaw stems from improper handling of the MTU length field, enabling a remote attacker to trigger a crash or resource exhaustion via a specially crafted packet. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and maps to CWE-805 (Buffer Size Argument Validation Error). The vulnerability was published on 2026-05-01T18:16:13.310.
Any unauthenticated remote attacker with network access to the affected agent can exploit this issue with low complexity and no user interaction required. Exploitation involves sending a malicious packet that manipulates the MTU length field, resulting in high-impact denial of service through availability disruption, such as service crashes, without affecting confidentiality or integrity.
Mitigation details and further advisories are documented in the project's GitHub issue at https://github.com/eProsima/Micro-XRCE-DDS-Agent/issues/390 and a CVE listing at https://github.com/j4kb4dw0lf/CVEs/blob/main/README.md. Security practitioners should consult these sources for patch information, workarounds, or updated versions of the agent.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-209605
Vulnerability Data
An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V1.4.1
Mitigating Controls (NIST 800-53 r5) AI
Developer testing and evaluation (including fuzzing and static analysis) directly finds incorrect length values used in sequential buffer accesses.
Secure engineering principles require explicit bounds checking and correct length calculations when performing buffer operations.
Input validation rejects or corrects malformed length values supplied from external sources before they reach buffer operations.
Memory protection mechanisms limit the blast radius when an incorrect length value causes an out-of-bounds access.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing in development can detect out-of-bounds accesses, but does not guarantee prevention.
Secure development life cycle mandates buffer-safety practices that directly prevent incorrect length values.
Application security requirements can specify buffer-size validation, but do not prescribe implementation details.
Secure architecture principles encourage bounds-checked APIs, yet leave concrete coding decisions to developers.
Secure coding explicitly requires correct buffer-length handling, eliminating CWE-805 when followed.