CVE-2026-2394

Published: Apr 1, 2026Modified: Jun 17, 2026

6.3

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 3f572a00-62e2-4423-959a-7ea25eff1638 (Secondary)

Description

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 4.3x before 5.2.*.

Affected (6)

Products: Rti: Connext Professional

Rti

1 product

Connext Professional

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Rti Connext Professional	From 4.3.0 to 5.2.3
Rti Connext Professional	From 5.3.0 to 5.3.1.45
Rti Connext Professional	From 6.0.0 to 6.0.1.40
Rti Connext Professional	From 6.1.0 to 6.1.2.27
Rti Connext Professional	From 7.0.0 to 7.3.1.1
Rti Connext Professional	From 7.4.0 to 7.7.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (1)

https://www.rti.com/vulnerabilities/#cve-2026-2394

Source: 3f572a00-62e2-4423-959a-7ea25eff1638

Vendor Advisory

Timeline

No history available yet.