A critical out-of-bounds write vulnerability in RTI Connext Professional allows unauthenticated remote attackers to trigger buffer overflows, potentially leading to service instability.

The software contains an off-by-one error leading to an out-of-bounds write within the Core Libraries. This flaw is remotely exploitable by an unauthenticated attacker, as indicated by the CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N.

While the CVSS 4.0 score is 6.9, this vulnerability poses a significant risk to operational continuity due to the potential for memory corruption. Successful exploitation could lead to unintended service crashes or the loss of availability in systems relying on Connext Professional for communication, resulting in operational downtime.

Immediate Action: Update RTI Connext Professional to version 7.7.0.1 or 7.3.1.6 immediately to resolve the vulnerable code paths.

Proactive Monitoring: Monitor system logs for abnormal service termination patterns or repeated application crashes that may indicate exploitation attempts.

Compensating Controls: Implement network segmentation to restrict access to the affected middleware components, ensuring only authorized traffic can interact with the Connext service.

Public Exploit Available: Unknown

Given the nature of out-of-bounds write vulnerabilities, the risk of service disruption is high for critical infrastructure components. Administrators should prioritize the deployment of the vendor-supplied patches to versions 7.7.0.1 or 7.3.1.6. Testing should be performed in a staging environment before full deployment to ensure compatibility with existing real-time communication architectures.