High · published May 8, 2025
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.5c before 5.1.*.
| Product | Versions | Fixed in |
|---|---|---|
| rti/connext_professional | ≥ 4.5c, ≤ 5.2.3 | — |
| rti/connext_professional | ≥ 5.3.0, ≤ 5.3.1.45 | — |
| rti/connext_professional | ≥ 6.0.0, ≤ 6.0.1.40 | — |
| rti/connext_professional | ≥ 6.1.0, < 6.1.2.23 | 6.1.2.23 |
| rti/connext_professional | ≥ 7.0.0, < 7.3.0.7 | 7.3.0.7 |
| rti/connext_professional | ≥ 7.4.0, < 7.5.0 | 7.5.0 |