CVE-2025-4582 is a buffer over-read vulnerability classified under CWE-126 and CWE-193 in RTI Connext Professional core libraries. The issue arises from an off-by-one error that causes the software to read beyond the intended buffer limits. Affected versions include 4.4a before 5.2.*, 5.3.0 before 5.3.*, 6.0.0 before 6.0.1.43, 6.1.0 before 6.1.2.26, 7.0.0 before 7.3.0.8, and 7.4.0 before 7.6.0. The CVSS 4.0 base score is 4.8, indicating medium severity with local attack vector, low complexity, no privileges required beyond low, and no user interaction needed. The vulnerability could allow file manipulation or buffer over-read but does not escalate privileges or cause denial of service according to the data. No patch or vendor advisory is currently referenced.

The vulnerability allows an attacker with local low-level privileges to read beyond buffer boundaries, which may lead to unauthorized file manipulation or information disclosure. The impact is limited by the requirement for local access and low privileges, and no known exploits are reported. The medium CVSS score reflects moderate risk without direct remote exploitation or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor RTI's advisories for updates. Until a fix is available, restrict local access to trusted users and environments to reduce risk.