CVE-2024-52060: Rti Connext Professional

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service, Recording Service, Queuing Service, Observability Collector Service, Cloud Discovery Service) allows Buffer Overflow via Environment Variables.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.1.45.

Affected products

• Rti Connext Professional: from 5.3.0, before 5.3.1.45 (fixed in 5.3.1.45); from 6.0.0, before 6.0.1.40 (fixed in 6.0.1.40); from 6.1.0, before 6.1.2.21 (fixed in 6.1.2.21); from 7.0.0, before 7.3.0.5 (fixed in 7.3.0.5)

Published 2024-12-13. Last modified 2026-06-17.