The vulnerability allows an attacker to write data beyond the intended bounds of a buffer in RTI Connext Professional’s Queueing Service, Core Libraries, or Persistence Service. This out‑of‑bounds write can corrupt adjacent memory, potentially causing crashes, data corruption, or unauthorized information disclosure. The weakness is classified as CWE‑787, a common memory corruption flaw that can lead to control‑flow hijacking if exploited.

RTI’s Connext Professional product is affected. Versions impacted include all releases from 7.4.0 up to but not including 7.7.0, from 7.0.0 up to but not including 7.3.1.3, and from 6.1.0 through every 6.1.x sub‑release before the latest 6.1.* update. Systems running any of these versions should verify whether they expose the vulnerable components.

The CVSS v3.1 base score is 4.8, indicating moderate impact. EPSS shows a very low exploitation probability of less than 1 %, and the issue is not listed in CISA’s KEV catalog. The attack vector is not explicitly described in the advisory; based on the nature of the flaw, it is likely a local or privileged attacker would need to provide crafted data to the vulnerable service. No publicly known exploits have been disclosed, so the risk is primarily theoretical until an exploit is found.