CVE-2025-1254CWE-125CWE-787

CVE-2025-1254

High · published May 8, 2025

CVSS v3.1
7.4
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2025-05-08T13:15Z
Affected products (4)
ProductVersionsFixed in
rti/connext_professional≥ 6.0.0, ≤ 6.0.1.40—
rti/connext_professional≥ 6.1.0, < 6.1.2.236.1.2.23
rti/connext_professional≥ 7.0.0, < 7.3.0.77.3.0.7
rti/connext_professional≥ 7.4.0, < 7.5.07.5.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2025-1254 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 08 MAY 08:32Z
    Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.
    cvelistv5