RTI Connext Professional Untrusted Pointer Dereference Vulnerability Allowing Pointer Manipulation

A vulnerability allowing untrusted pointer dereference has been identified in RTI Connext Professional Core Libraries. This issue affects versions 7.4.0 prior to 7.6.0 and 7.2.0 prior to 7.3.0.9. The vulnerability could lead to pointer manipulation, potentially causing memory corruption or allowing the execution of arbitrary code.

Impact

Exploitation of this vulnerability could result in invalid memory access, causing a crash of the affected application. Additionally, it could lead to unauthorized access to the application's memory, with the possibility of executing code remotely with system privileges.

Remediation

Users can upgrade to RTI Connext Professional version 7.3.0.10 or 7.6.0, both of which include the necessary patch. For versions and architectures not covered by these releases, patches can be requested through the RTI Customer Portal.