RTI Connext Professional contains memory safety vulnerabilities that could lead to application instability or service denial for authenticated local users.

This vulnerability involves out-of-bounds read, incorrect function argument counts, and type confusion in the Core Libraries, requiring a local user with low privileges to trigger the flaw.

The vulnerability carries a CVSS score of 6.8, characterizing it as a medium-severity issue. While the impact is primarily focused on availability through potential application crashes or memory corruption, successful exploitation could lead to system downtime in critical environments relying on RTI Connext for real-time data distribution.

Immediate Action: Update the RTI Connext Professional Core Libraries to version 7.7.0.1 or 7.3.1.6 as specified in the official vendor security advisory.

Proactive Monitoring: Review system and application logs for unusual memory errors or unexpected process terminations that may indicate attempted exploitation.

Compensating Controls: Restrict access to the system to authorized personnel only, adhering to the principle of least privilege to mitigate the risk posed by the required local access.

Public Exploit Available: Unknown

Given the potential for service disruption, administrators should prioritize updating the affected RTI Connext Professional libraries during the next scheduled maintenance window. While the vulnerability requires local access, applying the vendor-provided patches is the only definitive way to resolve the underlying memory safety defects.