CVE-2025-1253: Rti Connext Professional

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.5c before 5.1.*.

Affected products

• Rti Connext Professional: from 4.5c, up to and including 5.2.3; from 5.3.0, up to and including 5.3.1.45; from 6.0.0, up to and including 6.0.1.40; from 6.1.0, before 6.1.2.23 (fixed in 6.1.2.23); from 7.0.0, before 7.3.0.7 (fixed in 7.3.0.7); from 7.4.0, before 7.5.0 (fixed in 7.5.0)

Published 2025-05-08. Last modified 2026-09-22.