CVE-2025-1254

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.

State: Published
Severity: 7.7 High
Published: May 8, 2025
Updated: Sep 22, 2026
Reserved: Feb 12, 2025

Read the record on cve.org

Description

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	RTI
4.0	7.3 High	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	RTI

Weaknesses

CWE-125 Out-of-bounds Read
CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Connext ProfessionalRTI	7.4.0 to before 7.5.0Affected 7.0.0 to before 7.3.0.7Affected 6.1.0 to before 6.1.2.23Affected 6.0.0 to before 6.0.1.42Affected

References

https://www.rti.com/vulnerabilities/#cve-2025-1254

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.