PT-2024-35113
CVE-2024-52062
·
Published
2024-12-13
·
Updated
2025-10-02
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
RTI Connext Professional versions 5.0.0 through 5.3.1.45
RTI Connext Professional versions 6.0.0 through 6.0.1.40
RTI Connext Professional versions 6.1.0 through 6.1.2.21
RTI Connext Professional versions 7.0.0 through 7.3.0.5
Description
The issue is a buffer copy without checking the size of the input, also known as a 'classic buffer overflow', in RTI Connext Professional (Core Libraries). This allows for the overflow of variables and tags.
Recommendations
For versions 5.0.0 through 5.3.1.45, update to version 5.3.1.45 or later.
For versions 6.0.0 through 6.0.1.40, update to version 6.0.1.40 or later.
For versions 6.1.0 through 6.1.2.21, update to version 6.1.2.21 or later.
For versions 7.0.0 through 7.3.0.5, update to version 7.3.0.5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾