An out-of-bounds read flaw in the core libraries of RTI Connext Professional permits an attacker to read data beyond the intended buffer limits, which can expose sensitive information stored in memory such as secrets or credentials. This weakness is classified as CWE‑125 and can lead to confidential data leakage without requiring code execution.

The vulnerability affects RTI Connext Professional deployments across several major releases: from version 7.4.0 up to, but not including, 7.7.0; from 7.0.0 up to, but not including, 7.3.1.3; from 6.1.0 up to all 6.1.x releases; from 6.0.0 up to all 6.0.x releases; from 5.3.0 up to all 5.3.x releases; and from 5.0.0 up to all 5.2.x releases.

The CVSS score of 8.2 indicates high severity, while the EPSS score of less than 1% signals a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation requires access to the same process memory or a privilege level that allows memory probing. The resulting information disclosure makes it a significant risk for environments that handle sensitive data within Connext services.