PT-2025-39194 · Rti · Rti Connext Professional

Published 2025-09-23 · Updated 2025-10-02 · CVE-2025-4582

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 4.4a through 5.2.* RTI Connext Professional versions 5.3.0 through 5.3.* RTI Connext Professional versions 6.0.0 through 6.0.* RTI Connext Professional versions 6.1.0 through 6.1.2.26 RTI Connext Professional versions 7.0.0 through 7.3.0.8 RTI Connext Professional versions 7.4.0 through 7.6.0

Description An issue exists in RTI Connext Professional (Core Libraries) that involves a buffer over-read and off-by-one error, potentially leading to file manipulation.

Recommendations Update RTI Connext Professional versions 4.4a to a version later than 5.2.. Update RTI Connext Professional versions 5.3.0 to a version later than 5.3.. Update RTI Connext Professional versions 6.0.0 to a version later than 6.0.*. Update RTI Connext Professional versions 6.1.0 to version 6.1.2.26 or later. Update RTI Connext Professional versions 7.0.0 to version 7.3.0.8 or later. Update RTI Connext Professional versions 7.4.0 to version 7.6.0 or later.

Fix

Buffer Over-read

Weakness Enumeration

CWE-126

CWE-193

Related Identifiers

CVE-2025-4582

Affected Products

Rti Connext Professional

References · 7

• https://rti.com/vulnerabilities/#cve-2025-4582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4582 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4582 · Vendor Advisory
• https://twitter.com/CVEnew/status/1970621794408394824 · Twitter Post
• https://t.me/cveNotify/137184 · Telegram Post
• https://t.me/cveNotify/136898 · Telegram Post
• https://t.me/CVEtracker/33178 · Telegram Post