This vulnerability (CVE-2026-18458) in RTI Connext Professional Core Libraries is characterized by an out-of-bounds read caused by a function call with an incorrect number of arguments combined with type confusion. The issue leads to buffer overread, which can result in unauthorized access to memory regions. The affected versions include 6.1.2.21 exactly, all versions from 7.3.0 up to but excluding 7.3.1.6, and all versions from 7.4.0 up to but excluding 7.7.0.1. The CVSS 4.0 base score is 6.8, indicating medium severity, with local attack vector, low attack complexity, no privileges required beyond local, no user interaction, and high impact on availability. There is no information on patches or vendor advisories in the provided data.

The vulnerability allows an attacker with local access to cause out-of-bounds reads in memory, potentially leading to information disclosure or application instability. The impact is rated medium severity with a CVSS score of 6.8. There are no reports of active exploitation in the wild. The attack requires local privileges and does not require user interaction, limiting the attack surface to local users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor RTI's advisories for updates. Until a fix is available, limit local access to trusted users and consider applying any recommended workarounds from the vendor once available.