This vulnerability (CVE-2026-2394) involves a buffer over-read in RTI Connext Professional Core Libraries. Affected versions include 4.3x before 5.2.*, 5.3.0 before 5.3.*, 6.0.0 before 6.0.*, 6.1.0 before 6.1.2.34, 7.0.0 before 7.3.1.1, and 7.4.0 before 7.7.0. The buffer over-read could allow an attacker to read memory beyond the intended buffer limits. The CVSS 4.0 vector indicates network attack vector, low attack complexity, privileges not required, no user interaction, and low impact on confidentiality and availability, with partial impact on integrity. No vendor advisory or patch information is provided in the data.

Successful exploitation of this buffer over-read vulnerability could lead to unauthorized disclosure of memory contents or application crashes, potentially impacting confidentiality and availability to a limited extent. The medium CVSS score reflects moderate risk due to network attack vector and no required privileges or user interaction. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor RTI's advisories for updates. No specific mitigations or workarounds are provided in the available data.