CVE-2025-1254 Details
Description
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.
A vulnerability allowing out-of-bounds read and write operations has been identified in RTI Connext Professional's Recording Service. This issue can lead to buffer overflows and overreads. The vulnerability is present in Connext Professional versions 7.4.0 prior to 7.5.0, 7.0.0 prior to 7.3.0.7, 6.1.0 prior to 6.1.2.23, and 6.0.0 prior to 6.0.1.42.
To mitigate this vulnerability, it is recommended to protect access to the local file system where Recording Service stores data, and to use Security for topics accepted by Recording Service.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 8, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.rti.com/vulnerabilities/#cve-2025-1254 | RTI | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
| CWE-125 | Out-of-bounds Read | RTI |
| CWE-787 | Out-of-bounds Write | RTI |
Affected Products
| Product | Versions |
|---|---|
| rti connext professional | >= 6.0.0, <= 6.0.1.40 >= 6.1.0, < 6.1.2.23 >= 7.0.0, < 7.3.0.7 >= 7.4.0, < 7.5.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | RTI |
| Jun 17, 2026 | CVE Modified | RTI |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 31, 2025 | CVE Modified | RTI |
| Jun 5, 2025 | Initial Analysis | [email protected] |
| May 8, 2025 | New CVE Received | RTI |