This vulnerability (CWE-126) in RTI Connext Professional core libraries causes a buffer over-read condition, where the software reads data beyond the allocated buffer limits. Affected versions include 4.3x before 5.2.*, 5.3.0 before 5.3.*, 6.0.0 before 6.0.*, 6.1.0 before 6.1.*, 7.0.0 before 7.3.1.1, and 7.4.0 before 7.7.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impacts on confidentiality, integrity, and availability. No cloud service is involved, and no vendor advisory or patch links are currently available.

An attacker can cause the software to read memory beyond the intended buffer, which may lead to exposure of sensitive data. The impact is rated medium with a CVSS score of 6.3, reflecting limited confidentiality, integrity, and availability impacts. There are no reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patches or fixes have been provided in the available data. Users should monitor RTI's official channels for updates and apply any forthcoming patches promptly.