A double free vulnerability in RTI Connext Professional core libraries poses a risk of unauthorized file manipulation for local authenticated users.

This is a double free memory corruption issue (CWE-415) located within the Core Libraries. An attacker with low privileges (local access) can trigger this flaw to manipulate files on the host system.

While the CVSS score of 6.9 designates this as a medium severity issue, the ability to perform file manipulation can lead to significant integrity loss or system instability. If the affected software is integrated into mission critical infrastructure, unauthorized file modification could result in service disruption or the escalation of privileges if configuration files are targeted.

Immediate Action: Update RTI Connext Professional to version 7.7.0.1 or 7.3.1.6 as appropriate for your branch to resolve the memory management defect.

Proactive Monitoring: Monitor system logs for unusual file access patterns or unexpected process crashes that might indicate an attempt to trigger memory corruption.

Compensating Controls: Ensure that local access to systems running this software is strictly limited to authorized personnel to reduce the likelihood of a local attacker exploiting the vulnerability.

Public Exploit Available: Unknown

Although this vulnerability requires local access, the potential for file manipulation represents a material risk to system integrity. Security teams should prioritize patching during the next scheduled maintenance window to ensure the underlying memory management defect is fully remediated.