PT-2025-39195 · Rti · Rti Connext Professional

Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-4993

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 4.4a through 5.2.* RTI Connext Professional versions 5.3.0 through 5.3.* RTI Connext Professional versions 6.0.0 through 6.0.* RTI Connext Professional versions 6.1.0 through 6.1.2.27 RTI Connext Professional versions 7.0.0 through 7.3.0.10 RTI Connext Professional versions 7.4.0 through 7.6.0

Description An issue exists in RTI Connext Professional (Core Libraries) that allows pointer manipulation due to an untrusted pointer dereference.

Recommendations Update RTI Connext Professional to a version after 7.6.0. Update RTI Connext Professional to a version after 7.3.0.10. Update RTI Connext Professional to a version after 6.1.2.27. Update RTI Connext Professional to a version after 6.0.. Update RTI Connext Professional to a version after 5.3.. Update RTI Connext Professional to a version after 5.2.*.

Fix

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

CVE-2025-4993

Affected Products

Rti Connext Professional

References · 6

• https://osv.dev/vulnerability/CVE-2025-4993 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4993 · Security Note
• https://rti.com/vulnerabilities/#cve-2025-4993 · Vendor Advisory
• https://t.me/CVEtracker/33179 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1970598191381860714 · Twitter Post
• https://twitter.com/CVEnew/status/1970621793502445663 · Twitter Post