This vulnerability (CWE-134) in RTI Connext Professional Core Libraries allows an attacker to perform format string injection by controlling the format string externally. The affected versions are >=7.5.0 <7.7.0.1 and >=7.3.0.10 <7.3.1.6. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. The vulnerability is published and assigned by RTI but no explicit patch or remediation details are provided in the input data.

Successful exploitation could lead to severe consequences including potential arbitrary code execution or information disclosure due to format string injection. The CVSS score of 9.2 reflects critical severity with high impacts on confidentiality, integrity, and availability. However, no known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor RTI advisories for updates. Until a fix is available, avoid exposing vulnerable versions to untrusted inputs that could control format strings.