Read the docs
TI-2024-16925 Aliases CVE-2024-25724GHSA-29gq-rw72-mrqg

In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML…

Priority LOW 33CWE-120Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to execute code with the affected service's privileges, compromise the service's integrity, leak sensitive information, or crash the service. These attacks could be done via a remote malicious RTPS message; a compromised call with malicious parameters to the RTI_RoutingService_new, rti::recording::Service, RTI_QueuingService_new, or RTI_CDS_Service_new public APIs; or a compromised local file system containing a malicious XML file.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00183 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*5.3.0 to before 5.3.1.44; 6.0.0 to before 6.0.1.35VulnerableRTI
cpe:2.3:a:rti:connext_professional:6.1.0:*:*:*:*:*:*:*6.1.0VulnerableRTI
  • cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:* Versions 5.3.0 to before 5.3.1.44; 6.0.0 to before 6.0.1.35 Vulnerable ·RTI
  • cpe:2.3:a:rti:connext_professional:6.1.0:*:*:*:*:*:*:* Versions 6.1.0 Vulnerable ·RTI

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-25724
  2. 2026-10-03 Alias added: GHSA-29gq-rw72-mrqg

References

Advisory 1

  • TI-2021-16087 Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro CVSS 4.0HIGH 8.8
  • TI-2026-03368 Out-of-bounds read in RTI Connext Professional CVSS 4.0CRITICAL 9.2
  • TI-2026-02096 Heap-based buffer overflow in RTI Connext Professional CVSS 4.0CRITICAL 9.2
  • TI-2024-34933 SQL injection in RTI Connext Professional CVSS 4.0CRITICAL 9.1
  • TI-2021-16038 RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size CVSS 3.1CRITICAL 9.8
  • TI-2026-06407 Buffer overflow in RTI Connext Professional CVSS 4.0HIGH 8.8
See all 31 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences