CVE-2026-11389: Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Published Sep 22, 2026
·Updated
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6.
Affected Software
1 affected component
RTI Connext Professional>=7.4.0<7.7.0.1, >=7.3.0<7.3.1.6
Event History
Sep 22, 2026
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
DescriptionWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Affected versions are RTI Connext Professional from 7.4.0 before 7.7.0.1 and from 7.3.0 before 7.3.1.6. Deployments outside those stated version ranges are not identified as affected by the provided information.
2
What version should affected deployments upgrade to?
For the 7.4.x line, upgrade to 7.7.0.1 or later. For the 7.3.x line, upgrade to 7.3.1.6 or later.