CVE-2025-4582CWE-126CWE-193

CVE-2025-4582

High · published September 23, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.8, from 6.1.0 before 6.1.2.26, from 6.0.0 before 6.0.1.43, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.4a before 5.1.*.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00139 · 3.0th percentile
Weaknesses
CWE-126 · Buffer Over-read; CWE-193 · Off-by-one Error
Published
2025-09-23T22:15Z
Affected products (3)
ProductVersionsFixed in
rti/connext_professional≥ 4.4a, < 6.1.2.266.1.2.26
rti/connext_professional≥ 7.0.0, < 7.3.0.87.3.0.8
rti/connext_professional≥ 7.4.0, < 7.6.07.6.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2025-4582 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 23 SEP 17:51Z
    Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.
    cvelistv5