This vulnerability (CVE-2026-18457) is a heap-based buffer overflow in RTI Connext Professional core libraries. It affects versions >=7.4.0 <7.7.0.1, >=7.0.0 <7.3.1.6, and exactly 6.1.0, 6.0.0, 5.3.0, and 5.2.3. The flaw allows overflow of buffers on the heap, which can lead to memory corruption and potentially arbitrary code execution or denial of service. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, no confidentiality or integrity impact, but high availability and high vulnerability impact. No vendor advisory or patch information is provided in the input data.

Successful exploitation of this heap-based buffer overflow could allow an attacker to cause memory corruption, potentially leading to denial of service or execution of arbitrary code. The CVSS score of 8.3 reflects a high severity with significant impact on availability and vulnerability integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no vendor advisory or patch links are provided, users should monitor RTI's official channels for updates and apply any official fixes once available. Until then, consider limiting exposure of affected versions to untrusted networks.