CVE-2026-2394: Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1.2.34, from 6.0.0 before 6.0., from 5.3.0 before 5.3., from 4.3x before 5.2..
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 7.7.0 - Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 7.3.1.1 - Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 6.1.2.34 - Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 6.0.* - Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 5.3.* - Upgrade
Upgrade
RTI Connext Professional (Core Libraries)to a version that resolves this vulnerability.Fixed in 5.2.*
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2394?
CVE-2026-2394 has been rated as a moderate severity vulnerability.
How do I fix CVE-2026-2394?
To mitigate CVE-2026-2394, update your RTI Connext Professional software to versions 7.7.0 or later, or 7.3.1.1 or later.
What versions of RTI Connext Professional are affected by CVE-2026-2394?
CVE-2026-2394 affects all versions of RTI Connext Professional from 7.4.0 before 7.7.0, 7.0.0 before 7.3.1.1, as well as certain older versions down to 4.3x.
What type of vulnerability is CVE-2026-2394?
CVE-2026-2394 is classified as a Buffer Over-read vulnerability.
What are the potential impacts of CVE-2026-2394?
The potential impact of CVE-2026-2394 includes unauthorized access to sensitive data due to buffer over-read conditions.