The vulnerability is an integer underflow (wrap or wraparound) in the core libraries of RTI Connext Micro that allows overreading of buffer contents. Because the underflow causes the library to read beyond the intended buffer boundary, attackers could potentially read sensitive memory, resulting in information disclosure. The weakness aligns with CWE‑191, which covers integer overflow and underflow errors.

Affected systems include RTI Connext Micro Core Libraries from version 4.0.0 up to, but not including, 4.3.0. Any deployment running one of these versions is susceptible. The CVE notes only the core libraries, so applications built on top of Connext Micro that rely on these libraries are in risk if they have not updated.

The CVSS base score is 8.8, indicating a high‑severity flaw. EPSS is below 1 %, suggesting that exploitation probability is low, and the vulnerability is not currently listed in the CISA KEV catalog. Likely attack vectors involve sending crafted data packets to a Connext Micro process over the network; the exploit requires an attacker who can reach the vulnerable instance, possibly through publicly exposed ports or insecure remote access. Until a fix is applied, attackers could use this overread to glean confidential data or disrupt application operation.