CVE-2024-52061

CRITICAL

RTI Connext Professional - Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0085
EPSS Percentile 75.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-120 CWE-787
Status published
Products (1)
rti/connext_professional 5.0.0 - 5.3.1.45
Published Dec 13, 2024
Tracked Since Feb 18, 2026