CVE-2025-8410CWE-125CWE-416

CVE-2025-8410

High · published September 23, 2025

CVSS v3.1
7.4
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.5.0 before 7.6.0.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-416 · Use After Free
Published
2025-09-23T22:15Z
Affected products (1)
ProductVersionsFixed in
rti/connext_professional≥ 7.5.0, < 7.6.07.6.0
References (1)
https://www.rti.com/vulnerabilities/#cve-2025-8410 · 3f572a00-62e2-4423-959a-7ea25eff1638
EPSS history
Timeline
  • 23 SEP 17:52Z
    Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
    cvelistv5