CVE-2024-52059CWE-120CWE-122CWE-190

CVE-2024-52059

High · published December 13, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.17.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-122 · Heap-based Buffer Overflow; CWE-190 · Integer Overflow or Wraparound
Published
2024-12-13T16:15Z
Affected products (2)
ProductVersionsFixed in
rti/connext_professional≥ 6.1.0, < 6.1.2.176.1.2.17
rti/connext_professional≥ 7.0.0, < 7.3.0.27.3.0.2
References (1)
https://www.rti.com/vulnerabilities/#cve-2024-52059 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 13 DEC 10:18Z
    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags.
    cvelistv5