Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-1253

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.5c before 5.1.*.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RTI Connext Professional

Default version status: unaffected

  • 7.4.0 to < 7.5.0affected
  • 7.0.0 to < 7.3.0.7affected
  • 6.1.0 to < 6.1.2.23affected
  • 6.0.0 to < 6.0.1.42affected
  • 5.3.0 to < 5.3.*affected
  • 5.2.0 to < 5.2.*affected
  • 4.5c to < 5.1.*affected
pkg:generic/connext_professional

References