This vulnerability (CWE-125) in RTI Connext Professional Core Libraries allows an out-of-bounds read, potentially leading to information disclosure or other impacts related to buffer overread. It affects specific versions: exactly 7.4.0, 7.0.0, 6.1.0, 6.0.0, 5.3.0, and 5.0.0. The CVSS 4.0 vector indicates the vulnerability is remotely exploitable without authentication or user interaction, with high impact on availability and low impact on confidentiality and integrity. The vendor has not provided a remediation level or patch information at this time.

An attacker can exploit this vulnerability remotely without authentication or user interaction to cause out-of-bounds reads in affected RTI Connext Professional versions. This can lead to potential information disclosure or destabilization of the affected system. The CVSS score of 9.2 reflects critical severity with high impact on availability and some impact on integrity and confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently available.