Out-of-Bounds Read and Type Confusion in RTI Connext Professional by RTI
CVE-2026-11389

6.8MEDIUM

Key Information:

Vendor

Rti

Status
Connext Professional
Vendor
CVE Published:
22 September 2026

What is CVE-2026-11389?

The vulnerability in RTI Connext Professional arises from out-of-bounds read conditions, flawed function calls with an incorrect number of arguments, and type confusion, potentially allowing an attacker to overread buffers. This can lead to unintended information disclosure or software malfunction, affecting certain versions of the core libraries in Connext Professional.

Affected Version(s)

Connext Professional 7.4.0 < 7.7.0.1

Connext Professional 7.3.0 < 7.3.1.6

References

https://www.rti.com/vulnerabilities/#cve-2026-11389

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.