This vulnerability is a heap-based buffer overflow (CWE-122) in RTI Connext Professional Core Libraries. It affects versions 5.0.0 through versions prior to 5.2.*, 5.3.0 through prior to 5.3.*, 6.0.0 through prior to 6.0.*, 6.1.0 through prior to 6.1.*, 7.0.0 through prior to 7.3.1.3, and 7.4.0 through prior to 7.7.0. The overflow affects variables and tags within the software, which could lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial of service. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, high impact on availability and moderate impact on integrity, with high scope and low impact on confidentiality. The vendor has not provided an official remediation level or patch information yet.

The heap-based buffer overflow can lead to memory corruption, which may allow an attacker to execute arbitrary code, crash the application, or cause denial of service. Given the critical CVSS score of 9.2, the impact is severe if exploited. However, there are no known exploits in the wild currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently documented.