CVE-2025-1252CWE-122CWE-787

CVE-2025-1252

High · published May 8, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.4d before 5.1.*.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-05-08T13:15Z
Affected products (6)
ProductVersionsFixed in
rti/connext_professional≥ 4.4, ≤ 5.2.3—
rti/connext_professional≥ 5.3.0, ≤ 5.3.1.45—
rti/connext_professional≥ 6.0.0, ≤ 6.0.1.40—
rti/connext_professional≥ 6.1.0, < 6.1.2.236.1.2.23
rti/connext_professional≥ 7.0.0, < 7.3.0.77.3.0.7
rti/connext_professional≥ 7.4.0, < 7.5.07.5.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2025-1252 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 08 MAY 08:31Z
    Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
    cvelistv5