Read the docs
TI-2026-09829 Aliases CVE-2026-11389GHSA-v63h-ppxr-x489

Out-of-bounds read in RTI Connext Professional

Priority LOW 29CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00149 4th percentileScored 2026-11-07
Fix Fixed Connext Professional (RTI): 7.7.0.1, 7.3.1.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RTIConnext Professional7.4.0 to before 7.7.0.1; 7.3.0 to before 7.3.1.67.7.0.1, 7.3.1.6Patch availableCNA
  • Connext Professional VendorRTI Affected 7.4.0 to before 7.7.0.1; 7.3.0 to before 7.3.1.6 Fixed in 7.7.0.1, 7.3.1.6 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:*——RTI
  • cpe:2.3:a:rti:connext_professional:*:*:*:*:*:*:*:* Versions — — ·RTI

Remediation

  • Fix · CNA Connext Professional (RTI) Fixed in 7.7.0.1, 7.3.1.6

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    RTI Connext Professional 7.3.1.6, 7.7.0.1

    4 records Highest priority Priority MEDIUM 1 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2026-15165 Use of Externally-Controlled Format String vulnerability in RTI Connext Professional…Priority MEDIUM 42
    • TI-2026-15164 Out-of-bounds write in RTI Connext ProfessionalPriority LOW 37
    • TI-2026-09828 Double free in RTI Connext ProfessionalPriority LOW 29
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11389
  2. 2026-10-03 Alias added: GHSA-v63h-ppxr-x489

References

Other 1

  • TI-2021-16087 Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro CVSS 4.0HIGH 8.8
  • TI-2026-06924 Stack-based buffer overflow in RTI Connext Professional CVSS 4.0CRITICAL 10.0
  • TI-2026-23632 Integer underflow in RTI Connext Micro CVSS 4.0HIGH 8.8
  • TI-2026-03368 Out-of-bounds read in RTI Connext Professional CVSS 4.0CRITICAL 9.2
  • TI-2026-02096 Heap-based buffer overflow in RTI Connext Professional CVSS 4.0CRITICAL 9.2
  • TI-2024-34933 SQL injection in RTI Connext Professional CVSS 4.0CRITICAL 9.1
See all 44 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences