Executive brief
RTI Connext Professional is a middleware platform used for real-time data distribution in industrial and enterprise systems. A stack-based buffer overflow vulnerability in the core libraries could allow an attacker to crash systems or potentially execute arbitrary code, depending on how the product is deployed and accessed.
Technical details
A stack-based buffer overflow exists in the core libraries of RTI Connext Professional across multiple versions. The vulnerability can be triggered through external input and affects the integrity and availability of systems using the affected product. The advisory does not provide specific attack vector or authentication requirements; patches are available for active LTS releases.
Affected products
- RTI Connext Professional 7.4.0 before 7.7.0.1, 7.0.0 before 7.3.1.6, 6.1.0 before 6.1.x, 6.0.0 before 6.0.x, 5.3.0 before 5.3.x, 5.2.0 before 5.2.x, 4.3x before 5.1.x
Timeline
- 2026-09-22: disclosed