CVE-2025-1254

low-risk
Published 2025-05-08

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.

Do I need to act?

-
0.17% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.4/10 High
NETWORK / HIGH complexity

Affected Products (1)

Affected Vendors

Rti

References (1)

Vendor Advisory https://www.rti.com/vulnerabilities/#cve-2025-1254
28
/ 100
low-risk
Severity 22/34 · High
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal