Out-of-Bounds Read and Type Confusion in RTI Connext Professional Libraries
CVE-2026-18458

6.8MEDIUM

Key Information:

Vendor

Rti

Status
Connext Professional
Vendor
CVE Published:
22 September 2026

What is CVE-2026-18458?

The RTI Connext Professional Core Libraries are susceptible to an out-of-bounds read due to incorrect function call arguments and type confusion. This vulnerability permits the potential overreading of buffers, which may lead to unintended data exposure or application instability. The affected versions span from 7.4.0 to before 7.7.0.1, 7.3.0 to before 7.3.1.6, and from 6.1.2.21 to prior versions of 6.1.

Affected Version(s)

Connext Professional 7.4.0 < 7.7.0.1

Connext Professional 7.3.0 < 7.3.1.6

Connext Professional 6.1.2.21 < 6.1.*

References

https://www.rti.com/vulnerabilities/#cve-2026-18458

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.