RTI Connext Professional Untrusted Pointer Dereference Vulnerability Allowing Pointer Manipulation

A vulnerability allowing untrusted pointer dereference has been identified in RTI Connext Professional Core Libraries. This issue affects versions 7.4.0 prior to 7.6.0, 7.0.0 prior to 7.3.0.10, 6.1.0 prior to 6.1.2.27, 6.0.0 prior to 6.0.*, 5.3.0 prior to 5.3.*, and 4.4a prior to 5.2.*. The vulnerability allows for pointer manipulation, which could be exploited to cause memory access errors.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, allowing for potential memory corruption or unauthorized access to sensitive information within the affected application.

Remediation

Users can upgrade to RTI Connext Professional versions 7.3.0.10 or 7.5.0, both of which include the necessary patch. For versions 6.1.2, 7.3.0 and 5.3.0, patches are available upon request through the RTI Customer Portal.